Outt
Sett
Behavioral task
behavioral1
Sample
6fcec96f1df53c4b511bac899548197a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6fcec96f1df53c4b511bac899548197a_JaffaCakes118
Size
72KB
MD5
6fcec96f1df53c4b511bac899548197a
SHA1
25ffaca938cbb7e9e834cd264c5f314aabe86e18
SHA256
3622559f774c245c1d9bd214382ebb4fb15b83d6eeaec2c71754f0a535286ebc
SHA512
cd6244d16fdc72ffce71dd326266e16c3f4bc55d2115393470cc984b53cc954142d089f8893d59f4e11522ce1ce0f0bba2a57f9a7c38ac6d958cc716ec783e8d
SSDEEP
1536:eva3/hsPFdV+Px/Eprr+e6t5SxWBqJIchSUyzGGgYG+5v0G2:JIocrrktsxdoUyz4+Z0j
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6fcec96f1df53c4b511bac899548197a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ