Outt
Sett
Behavioral task
behavioral1
Sample
2210eae56fc0826d3a284adec2092f8e_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2210eae56fc0826d3a284adec2092f8e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
2210eae56fc0826d3a284adec2092f8e_JaffaCakes118
Size
55KB
MD5
2210eae56fc0826d3a284adec2092f8e
SHA1
3e74dfeaead38c22fbcd82fb62b060af65af84d9
SHA256
f3afa0efd06492ba9782d1a7b6749022d0e8289d460e907dbaf927850f439677
SHA512
574ac6b4311edab4987f64bf55e9e79860f2d93b6a3e5d694d65a1e404c6140daa50350d6d6d61e3e21023163f477fba0221e1bf48a0373dacfda93d5332ca32
SSDEEP
1536:1zExMwCGQ2jMDIdHfdbqEbNNuyw1ujKj+S:1I+wCGvNfdbqSNdjTS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2210eae56fc0826d3a284adec2092f8e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ