Outt
Sett
Behavioral task
behavioral1
Sample
a6d946d43c46822dc79ed788a30e8d1f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a6d946d43c46822dc79ed788a30e8d1f_JaffaCakes118
Size
78KB
MD5
a6d946d43c46822dc79ed788a30e8d1f
SHA1
7b5b1c779df5a594b9ffa39b85fe950edbb70ac7
SHA256
dd2a803cf56482fb2392cc7860d0d08048ba606e15e3b14decc5fdc41afe5dbd
SHA512
afb9dcddf9ea4b96c8589646d5a0df5f97e64981d62e951db57c59737a53dba5f0ab5161ce00416e8067a5ec0b8d83752e827e9cf727a27cf7bf1c4aaf8cee20
SSDEEP
1536:agF0eiyUcbHnW5YaEDHdB+y3LZNkfBJu6wJ2XRE5Ypi6iJKjY6b2W:t2yFLmYDHTx3LZCfLuP5UiqjX6W
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6d946d43c46822dc79ed788a30e8d1f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ