Outt
Sett
Behavioral task
behavioral1
Sample
dd6e6ec2dc3a89823886e7bb9bea15cb_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dd6e6ec2dc3a89823886e7bb9bea15cb_JaffaCakes118
Size
62KB
MD5
dd6e6ec2dc3a89823886e7bb9bea15cb
SHA1
061b209e504931d6cf5ec63a7f6925dec1316ad4
SHA256
491ebf3e5f525cb820bcf4dc52493358fe96f1b4a2bbf192c4a9441bc0d0616e
SHA512
ef4740fc0e282bcd91ebe265282a5ef8b3a2f201a64655854ae122c9a88a3f37b97ad95aa48397b949bb369ce8a180b2f00315b76992772bd641bfd28d1a6b61
SSDEEP
768:Gx4m7JNSll3dTG+LJwx7OYF6KtTw1TlR9S/H/nS2IaCbOs7fCyiE5xQ7ol6cf9:Bm1NGJVGRxKYMDR9yHDIayLRWcAcf9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dd6e6ec2dc3a89823886e7bb9bea15cb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ