Outt
Sett
Behavioral task
behavioral1
Sample
2786371bb5d0754928b68a61f0dafdda_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2786371bb5d0754928b68a61f0dafdda_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2786371bb5d0754928b68a61f0dafdda_JaffaCakes118
Size
57KB
MD5
2786371bb5d0754928b68a61f0dafdda
SHA1
5e09222b21638fee70807c50df72dd7b8c6f9410
SHA256
745d8dc4f394a008dbd28048771518ac5f26fa4c954ad8acf60fa1092b5ebeac
SHA512
70415090fa2bc35cb730a6f8e21a788d4f349b170238ff486070586db8e9400113d1d6e4ca7ac05659f924876a2a2b67991435d2d23a152d2181d9ceb18c6ba7
SSDEEP
768:GbvLDaaMact8TCNuQAUqMtxm2NxMFm8gX5BhI0eJ1Whi/aPQJ5NB14E8YimHZatp:ev2cQAUAFm8IhI06oiCoJ5l4IRQDiy0k
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2786371bb5d0754928b68a61f0dafdda_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ