Outt
Sett
Behavioral task
behavioral1
Sample
a78e2ce049c78490c8b718782e9de465_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a78e2ce049c78490c8b718782e9de465_JaffaCakes118
Size
69KB
MD5
a78e2ce049c78490c8b718782e9de465
SHA1
e7f55d29efcf8a7cc5a8e203cd80ec10b6765ccd
SHA256
18b5de908fb8b9bc18969a4c76b72477c2856491023777fbd495aab7cc941ee8
SHA512
d202213c94af4c1a07eae3422893f469835ad783bb530de10aa6287b45e92799f012f5a3a12ca66ee20fa25c98544f0a585a6f20f09ffc0985338b6f175295f3
SSDEEP
1536:1zExMwCGQ2jnE13t04Pe1BFdA4SpE8tAfXPsPqusrnAfXxF6gaJPO:1I+wCGv7G3jm1XVqE8tAfXPsCxnAfXx7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a78e2ce049c78490c8b718782e9de465_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ