Outt
Sett
Behavioral task
behavioral1
Sample
78c6ac1e8fe8d7454df1f074a579c852_JaffaCakes118.dll
Resource
win7-20240729-en
Target
78c6ac1e8fe8d7454df1f074a579c852_JaffaCakes118
Size
60KB
MD5
78c6ac1e8fe8d7454df1f074a579c852
SHA1
411b5a8fe81d167711a22d487b8367f00b8e5fe4
SHA256
2b285be7bc44952c5a7154120ac68ac87f417e39f9692fa4c5d0f6c81f7003eb
SHA512
f7c44221845123847dfa294149741f15d64012641b88d155cfda920b9c4cd4ec7a5cd71632cb473128a7b489a2b4aa73c65ac7ae3f8268375f3c126f775c202e
SSDEEP
1536:yl3E0TQaNxdfFmjR5KiUbMfWyfHUljUzAplT4NJm55Hm:E391xdfFmjR5KiUb7yf09uAplAcbHm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78c6ac1e8fe8d7454df1f074a579c852_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ