Outt
Sett
Behavioral task
behavioral1
Sample
6fc880390227f62f05469bd6c7e9adc9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6fc880390227f62f05469bd6c7e9adc9_JaffaCakes118
Size
59KB
MD5
6fc880390227f62f05469bd6c7e9adc9
SHA1
79f9863fcda3de4d8f2e1184a12d8f4da6d2cd8e
SHA256
06b4e02dede263a2be4b905fb6ae94b514cedb03d29aadd23136b423f777edbf
SHA512
a1ad58b1bad18aeb1f4fb7df779e4c18d454e87348f5875eaabd7663d115dbbc3aec68a9e518c9394faf85e5da81f2f45f2fab10a31c8ab8f5dfd648ed24acf7
SSDEEP
1536:anRtzOgALIwcnK6qlxBZWjXy0QLTTgfOOG:aRlALncKNl/DNfTgfOOG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6fc880390227f62f05469bd6c7e9adc9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ