Outt
Sett
Behavioral task
behavioral1
Sample
c78b4a3e3648b1553e8499738197bc5f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c78b4a3e3648b1553e8499738197bc5f_JaffaCakes118
Size
50KB
MD5
c78b4a3e3648b1553e8499738197bc5f
SHA1
c9c8ed1839e84eeae1322f9b02743a183a981161
SHA256
692595d53ea4a467e4c257337d797b5c1441d2c219e6ca07f2c4a8148754f0df
SHA512
b296cd1c7d9cdfa056730afdea64e29c5c89f567281eb8bb7e1b9a47cce7250170faa2e72ecf3ff5da933a1a9f55db9c1d2240cc7b46fd1161bdac8fefc3f7a9
SSDEEP
768:9xBtKtqyLUeHOoglriwRKwcfea4fYQBQ1UcEv+2iaanmeFRClhpz2Ton36YsqaOQ:9mgrHFaEOjijJabEhpSc3zaO+v
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c78b4a3e3648b1553e8499738197bc5f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ