Outt
Sett
Behavioral task
behavioral1
Sample
a6054c766cb8cb0faf68b0c1c1ff5f7a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a6054c766cb8cb0faf68b0c1c1ff5f7a_JaffaCakes118
Size
65KB
MD5
a6054c766cb8cb0faf68b0c1c1ff5f7a
SHA1
3aa60f36b9a29159c7127acb2fd7a4b3a61b7523
SHA256
690e313a0a7aa191a63034d48d2de20b157ee95d38b1358ab20b3ff56509b2da
SHA512
9b96ecaacd6d72eb821ed9d16de124e88e71c3dcaca7c20d8d2d1dc2098f1aa0fe0b859c23b4558cc74ca100f99a49a4620311fda540d0dea99b70fcadacf6c1
SSDEEP
1536:yl3E0TXe7hibL42oj92s29cThwbEsXHJ+Mrq2trvbsR6T:E390hibcBr29ohwbEsXp+WrzskT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6054c766cb8cb0faf68b0c1c1ff5f7a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ