Outt
Sett
Behavioral task
behavioral1
Sample
156780f0ccd406bc6a0a81d15ac8598d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
156780f0ccd406bc6a0a81d15ac8598d_JaffaCakes118
Size
61KB
MD5
156780f0ccd406bc6a0a81d15ac8598d
SHA1
4530baeb60f4e833e99ec4d45f718a5ef5d358b4
SHA256
cc6d2fc4806166dac79e333bfefb6fdf22a88ff78b6c4067f71893410558ae3d
SHA512
d6954c93807572d1dffe5f69a8ef535d81309520a587646a91987175dcb23f50f0478194c08f75d4f364aa1a19949e43432bac3ac8655f3689940ed218a330ee
SSDEEP
768:Ji4dmkm+/V0s1q3NPNE2tjDgBLio25A0n9YwQYh2AIwZ3Q+fim23qiMygew9Uq31:xY+H1DwjeH30n9OEKwZ3vG3pi19h9T
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
156780f0ccd406bc6a0a81d15ac8598d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ