Outt
Sett
Behavioral task
behavioral1
Sample
2524f2f40d34b0bf25b5e3d30646b269_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2524f2f40d34b0bf25b5e3d30646b269_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2524f2f40d34b0bf25b5e3d30646b269_JaffaCakes118
Size
68KB
MD5
2524f2f40d34b0bf25b5e3d30646b269
SHA1
92cadbe7eebb46caea2ee4c3df3d410f7791fd48
SHA256
0c5c66299284d53bce2a1e118df84a258c02dbfd289b53306f9966f071e8af75
SHA512
5d72fd8594c8c9ddc1e651daaa780b41807e1b00e9dffc48ff1fb2b90b8fd3481d5d3e5d01c0f9e5cb592e2b49194d96642385b6f0aae75af8b7d2660c049ca8
SSDEEP
1536:mPO6KEVbsVP0gtnwnVRU5jZxHO2lDiEJoGaKdTv3hTXIWz3Bi7LGVvQSfm:cMEVbsVcYnwVRU5jplyGauTX330Kvpe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2524f2f40d34b0bf25b5e3d30646b269_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ