Outt
Sett
Behavioral task
behavioral1
Sample
6fb0d54f6d50516312faff8cd9b9c3b6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6fb0d54f6d50516312faff8cd9b9c3b6_JaffaCakes118
Size
58KB
MD5
6fb0d54f6d50516312faff8cd9b9c3b6
SHA1
d3012e95c81821084d83e1fdfe5ef9b1e7ac1500
SHA256
7005accc41d96563cf2641353753e77d2b4b38d81dcff1b0176aa90935b981c7
SHA512
d368abc9b95c93a168e7d1b5a6f09fcafba36d4a75085778355b6db07a138e27b7e00d4e60cde509dad8d203c5d26c36669c35ab779041fa39104421f3d3b7f1
SSDEEP
768:9xBtKtqyLU+xSTTcL/vPWPRcT0Xgnvypbjo1/1clbSBQ9TIamvOgcl2JUNdaA2RT:9dToL/L9vyp/KcldrngqvaPoXlOT7qre
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6fb0d54f6d50516312faff8cd9b9c3b6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ