Outt
Sett
Behavioral task
behavioral1
Sample
b6c550a10e6511087b6970c6e8364c78_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b6c550a10e6511087b6970c6e8364c78_JaffaCakes118
Size
60KB
MD5
b6c550a10e6511087b6970c6e8364c78
SHA1
50ea31dcfd2b3a772f24d09dabc23b062213abac
SHA256
1d8ecfffb9d2d5bbff60c83963a09cd59386711ee5b2de95d283e95ebfc30aaa
SHA512
1a2eb290015ec275975bf2ef41d3f8a90ba9315881db9bbaad65dea73638b423e02ce7a66d4027a97077e5150b751854a86683fb699c24fad69ac08e6fa6c75b
SSDEEP
1536:MhBRVgrExucMaGH/YtbhHS6sfUWUd9yDNPcOd5BaioAi4oHlu:cRRsitbhykRd9yDNUOHB9foHQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b6c550a10e6511087b6970c6e8364c78_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ