Outt
Sett
Behavioral task
behavioral1
Sample
b6e4202ecbc7c6c2635ce7079d53b25f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b6e4202ecbc7c6c2635ce7079d53b25f_JaffaCakes118
Size
63KB
MD5
b6e4202ecbc7c6c2635ce7079d53b25f
SHA1
60761353f2ce0c4f3d9e3230712534a88ec9442b
SHA256
17675d7b4162aed903ac58a6d998802181d0c47ec436863979ed3c9205ac2d95
SHA512
1136a15418719a104516ee449dc6937a5839327c01c64dc3acc0b9530674f508793858bfa265051f1855107713c96d7c11e7b6dfddb1738e67bb063b1dc9fb1a
SSDEEP
1536:2LOJMXV6PjRvpAbRj8FTVOV1rzPooR570bfYFWRE8hOEd:2rkP1qvZzPoaARrf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b6e4202ecbc7c6c2635ce7079d53b25f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ