Outt
Sett
Behavioral task
behavioral1
Sample
a6d2e8ba645ec41643953a171ec01393_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a6d2e8ba645ec41643953a171ec01393_JaffaCakes118
Size
59KB
MD5
a6d2e8ba645ec41643953a171ec01393
SHA1
81ed477cde90a37f5d10ced503232f1e0703f614
SHA256
90caa45e927ddf410591152394f1b5316b1f10f6043c7b3fff2b4f9021a41e6b
SHA512
94d80c04dfd5a52207c8d924fcd64bf0296f5987ecf8c1b03310b0caffe2aff47e1ffe0532b703c598777c41496e03bc1e1c2304ee997cd17dfad05976069220
SSDEEP
1536:ob8Vwn/ZqchAH2xoU+xfTTzgduOyIz02dv2k:oz/Zq282mbT0J7n
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6d2e8ba645ec41643953a171ec01393_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ