Outt
Sett
Behavioral task
behavioral1
Sample
78edee9633995d8ff332d645ba6f3fa3_JaffaCakes118.dll
Resource
win7-20240729-en
Target
78edee9633995d8ff332d645ba6f3fa3_JaffaCakes118
Size
61KB
MD5
78edee9633995d8ff332d645ba6f3fa3
SHA1
6e68d352dc70c91ad3728f2e49ef059bbe9da5b3
SHA256
259605d791d269abf2593e344d2dc5dadaa605767895f104ffe2f7e12f1b37eb
SHA512
a82e884293abeea9a12cecf1119fc2ee6255e60209cd7a1e63d63586df9e2184be0a45d9bf693d64fa7f6bcc19e04bd55c1e42f7bdafdf5e77c2eeb5b4cd88b6
SSDEEP
1536:Bm1NGJVGg6Z2OKqPLchPYbeUDnjXGKzx5/jgwW:kX0V3qohPtUDnbi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78edee9633995d8ff332d645ba6f3fa3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ