Outt
Sett
Behavioral task
behavioral1
Sample
f606e3e9798c9a5b8c2fbf4fb2f333e2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f606e3e9798c9a5b8c2fbf4fb2f333e2_JaffaCakes118
Size
60KB
MD5
f606e3e9798c9a5b8c2fbf4fb2f333e2
SHA1
9047a4cd0c4211ee52e30d794d1177a37eb6cda3
SHA256
2fb9b281bb2dc5c593b4f89ea16e60794f1973478a6a19e2fb99c185a5b646fa
SHA512
2f6d1cd24c71c1aafabfa651c6b54411e0676c1c9aa5a8d0fb76846d2437ae5ed95afe440735d777d95127cde7ad59e3a49f064a42f65a7ddac5357393814d34
SSDEEP
1536:jZIcCxR2tREyep71HQGPuFGvgBRWckK1ck3pv/:x+UU1xNQObvgvWkbpv/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f606e3e9798c9a5b8c2fbf4fb2f333e2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ