Outt
Sett
Behavioral task
behavioral1
Sample
6fd0a908890a5fd678888869ab2c23b0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6fd0a908890a5fd678888869ab2c23b0_JaffaCakes118
Size
66KB
MD5
6fd0a908890a5fd678888869ab2c23b0
SHA1
6baf64c93f23c143a3a38d741ed7af85cb6ad1f8
SHA256
25cfe3e80fcd258e4137ba079ef67f98f33d84fe7b12ed860f673c12d204ffbe
SHA512
47b7ac9694ee022e590fd4f79ef447ba36054a9a8470cfb7a42d1915d61eccc71a447b759ac31f69713f814add478bbcd106b79b030287c64df4d1678b1df850
SSDEEP
1536:s65kurdyrk9VfOJbxHff+2OdXy+CDByJp99ZMfAx1cX3ji:trdyIbOJV+/dC2JmA7c3e
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6fd0a908890a5fd678888869ab2c23b0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ