Outt
Sett
Behavioral task
behavioral1
Sample
db6a804f8bffb484e8cbe3f864fc8a06_JaffaCakes118.dll
Resource
win7-20240903-en
Target
db6a804f8bffb484e8cbe3f864fc8a06_JaffaCakes118
Size
55KB
MD5
db6a804f8bffb484e8cbe3f864fc8a06
SHA1
7578deb255f6b1809ee5f4308593aae8d3a3782d
SHA256
4607bc86253513d3fc3e244627e89bfa632d14debc0868c4ffb15f417da709ea
SHA512
4f028ac1c4210f9ba9a470c4301d50f83831683a82ce628f3521f18dee05da87f2e2cfb8ea4e72b3618b5fba475d11a868a201066362bd99e06a3987ff59dea0
SSDEEP
1536:kjRUAXRWqlluJxn8OYck+WQQDGyUhYqsGLT:kFPh9llpOYckvjWGqTT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
db6a804f8bffb484e8cbe3f864fc8a06_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ