Outt
Sett
Behavioral task
behavioral1
Sample
78225f9e20838f0246feb69c2bb5912b_JaffaCakes118.dll
Resource
win7-20240729-en
Target
78225f9e20838f0246feb69c2bb5912b_JaffaCakes118
Size
66KB
MD5
78225f9e20838f0246feb69c2bb5912b
SHA1
4b6977c445461cbdec6bda7a6d9892ced1319db5
SHA256
3c7119f47bb5eab52815f2171f89673435ce8399701cd2733248dc341f59393c
SHA512
641e64fc44746e07d9ebb84190a9280d913591892fc6671bdad70dbd57020d831b3c58def0c232c44b6671cf26afbab6c319a57388db3ac1c357086b2bfef907
SSDEEP
1536:Bm1NGJVG6BnKq8N0+t0SbEFARlFSovWdhQxv42HwT:kX0VxKqA0k0ogcjxEhQ51E
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78225f9e20838f0246feb69c2bb5912b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ