Outt
Sett
Behavioral task
behavioral1
Sample
78e006da8beef72624b22a295d630fa1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
78e006da8beef72624b22a295d630fa1_JaffaCakes118
Size
77KB
MD5
78e006da8beef72624b22a295d630fa1
SHA1
40d2fe5c726ad6a96813861ecbb38fcd3264e8ed
SHA256
244bdde09be36c8b262aa61594a17baa98c2915614de1722d569e6d0fabdb2d9
SHA512
8d68f6516ead665d8af7dfbe117892730e532e9260eea1aa203b0441eb49da5838bdcb05291697a7616610525dba9b8e96d1370f96787b371c72e21dff9ac1f8
SSDEEP
1536:1zExMwCGQ2jb2xyjXGzBd+kjUi+nnHOruJuYjMxLxZNojg6D:1I+wCGv32xTD+KUxnnHOOGxoge
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78e006da8beef72624b22a295d630fa1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ