Outt
Sett
Behavioral task
behavioral1
Sample
78e4efdedd642b7927281c4ebc029c65_JaffaCakes118.dll
Resource
win7-20240704-en
Target
78e4efdedd642b7927281c4ebc029c65_JaffaCakes118
Size
57KB
MD5
78e4efdedd642b7927281c4ebc029c65
SHA1
c246afb6d842a6bf221c55a9235b945bb8c04b3c
SHA256
5397c09d7d751eaccfae9a6547591f3311257dd3a5e23c0ee2c8cd148651c976
SHA512
082f4256458c0ecd3b56d7ad792fef5445ed07138a4867cfcc37d5cb4310b4aa326a543c55230d8f1d6caa776a18342d6b50ded9eefe142af79f49a242e51915
SSDEEP
768:9xBtKtqyLUGHLLtdGK1faczXWALnd3ZFFTLPEc9oSiFqcK+1JMKT/VoD8m3DQoDn:9YHl1facjLXjEMbcK+1JMBJZTn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78e4efdedd642b7927281c4ebc029c65_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ