Outt
Sett
Behavioral task
behavioral1
Sample
2217decbd4a89a2ee1e7f326725f9b57_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2217decbd4a89a2ee1e7f326725f9b57_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2217decbd4a89a2ee1e7f326725f9b57_JaffaCakes118
Size
57KB
MD5
2217decbd4a89a2ee1e7f326725f9b57
SHA1
1f7fba31be798cd5b879d0a6c22d7a9f244fa3a6
SHA256
1115f9823e58e8cc7f83e288ea47932ecdc2b0044b55066c96fb6fb23382480c
SHA512
e937c18f3b41fd53b8107198a3e1f69af5557c5ee7513dce642c6d4ad049a04ea03ddcf2ec36ddfd4d326c0384fc05b5168f5b9eddbfc2b1e910d5eb2718f1e2
SSDEEP
1536:MhBRVgrExucMpVDhyezQKM6oluIJflHKz3I9eMJRHJi3D:cRRsFDMEQr6ouKQY9DiD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2217decbd4a89a2ee1e7f326725f9b57_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ