Outt
Sett
Behavioral task
behavioral1
Sample
2996e22a91af1a65a4494746eb62bbe8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2996e22a91af1a65a4494746eb62bbe8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2996e22a91af1a65a4494746eb62bbe8_JaffaCakes118
Size
67KB
MD5
2996e22a91af1a65a4494746eb62bbe8
SHA1
03c00ab911ad303549446b08f7be3cb45517e598
SHA256
784e0c2b91396a43bb9efa589832fa8493b7cb852a19d5e413a7479b965005fe
SHA512
28c300c7e8c158dcf4934e7b64a2f9a528a73eda51b5396b4c3a2b0635624febf235c1e1edaf61d30fc096be9f00bb229f3d275b107ec269fd4a123448a48ee3
SSDEEP
1536:GQ3tfgXKRHwoE5Qmq2XQjDR0555MaRQ4v9aiH2PSw5cmsR8xA7sB:VfgXKWoE6cA05MCAiWdsqG7Y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2996e22a91af1a65a4494746eb62bbe8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ