Outt
Sett
Behavioral task
behavioral1
Sample
b6fc22de7b3e8f62dd6bd5d96f078770_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b6fc22de7b3e8f62dd6bd5d96f078770_JaffaCakes118
Size
69KB
MD5
b6fc22de7b3e8f62dd6bd5d96f078770
SHA1
fd7185d21bde2fe7104bc8eafa0d82adbfc1645c
SHA256
2f14c880b295da71ea7edfdf2aad65c3c90bd010ae67c85fef3db980151d819f
SHA512
330128f0cd404f6ca600254ac6c761a411e02f5e4bac0f85a6339f9b42aa8781874bc4176d4172839fd3c9bdf731ff9c2ac774de64acb0c348eed9d8a4cc1533
SSDEEP
1536:Bm1NGJVGBdacSYbo754B1GXxuX6Mvf4HM2CbJVfTKG:kX0VEda+c7eMxuX60V2UXKG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b6fc22de7b3e8f62dd6bd5d96f078770_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ