Outt
Sett
Behavioral task
behavioral1
Sample
780c7e3c8c5ae538f69159071d1987fa_JaffaCakes118.dll
Resource
win7-20240705-en
Target
780c7e3c8c5ae538f69159071d1987fa_JaffaCakes118
Size
68KB
MD5
780c7e3c8c5ae538f69159071d1987fa
SHA1
3febf4a518d3bb6096b233a6673a9b08fd5c57ab
SHA256
3f69d0c13490a8c1d10f95b2e7a79f5a900727a04f0c721a72c94ee9939c8a48
SHA512
738218d24161c3bdf3bec71c9ebccad154759fb0f3dbcdd61c5fd4db018db7e3cc9425611fbc6416e9502c3ed570f4f445e5ad4cd278a5131ec9e1cf358da674
SSDEEP
1536:uaqqc9Q7YAAGmff+ajNDg1udYYsL6Ns4s+q7wT12t07:ufqc9QEA0ffrRSCYYYEs4uV07
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
780c7e3c8c5ae538f69159071d1987fa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ