Outt
Sett
Behavioral task
behavioral1
Sample
78dc1569243d33299f6a39cf962f254e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
78dc1569243d33299f6a39cf962f254e_JaffaCakes118
Size
71KB
MD5
78dc1569243d33299f6a39cf962f254e
SHA1
3bbca8ddc16abc2a3c10dec7bcea45e8b9b975bd
SHA256
1cd8c1eb80f305536799d1d44d72c3eea10b3e6492cc8c81dccc59b7770716d5
SHA512
7b10d02600681ec7d50fce31a1b34c684cccc356cfcba046d40893428c9d2936ceea7306d792cdb1d952f278121dffb40bbd8eee4be4fc1fc444fede24e2bbc8
SSDEEP
1536:Bm1NGJVGCWMZfsM8BA/E634F4Hsf6TUiljmGllfC9DTFc:kX0VT5VZ8BOE6MS5yGlluDTFc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78dc1569243d33299f6a39cf962f254e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ