Outt
Sett
Behavioral task
behavioral1
Sample
69b78f3ff74b3a43497b1b6266037e51_JaffaCakes118.dll
Resource
win7-20240705-en
Target
69b78f3ff74b3a43497b1b6266037e51_JaffaCakes118
Size
72KB
MD5
69b78f3ff74b3a43497b1b6266037e51
SHA1
7ccd3d8bdfe944e09488553d973553a6b4aff704
SHA256
1ed567b01cc52a652995cefb2780ae5b3291f9cf830c495ffd56f594a0ff171c
SHA512
e00ceb17dd9b59677f5635faad5185688529d4bcc71ff9b15e6a234874b8cd67a0774dc0d4407676de38ca4dfd14e16c1cf04468121e03048719505490650b7f
SSDEEP
1536:yHZX2++yRP5kZUXVNg77qEOFqkoNuYFiev:yHz+IqZmg77qEOJoNuY3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69b78f3ff74b3a43497b1b6266037e51_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ