Outt
Sett
Behavioral task
behavioral1
Sample
a78d4890be9cbfd47153256c8ae9e06c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a78d4890be9cbfd47153256c8ae9e06c_JaffaCakes118
Size
57KB
MD5
a78d4890be9cbfd47153256c8ae9e06c
SHA1
a51a8313580e894040fd0965b38b41c58010df3c
SHA256
b5436f627c0f9d83d5004dc5e2eb66946f69c418838cb5aae2e02a3525592686
SHA512
6787e65b352c57cfa2ef871a810f0b19c08ebc4297a913dc7e19c8a9641a6956c3636864080b30d40bb20c486d5ed64d87786ea3554ee080645f322c1d080c2d
SSDEEP
1536:5jRmOm3HqkkY7wYsEVXDs9nSz6LnUAeQabforAiFr7l3iB:xfmXnkApGnHe5QrJfiB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a78d4890be9cbfd47153256c8ae9e06c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ