Outt
Sett
Behavioral task
behavioral1
Sample
2df8d25449ae3e72ad7df35201899ca3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2df8d25449ae3e72ad7df35201899ca3_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2df8d25449ae3e72ad7df35201899ca3_JaffaCakes118
Size
61KB
MD5
2df8d25449ae3e72ad7df35201899ca3
SHA1
0a24b9aaddad52fe3e5f33237bc0fabbabc32ea0
SHA256
950fd8f1bf84ce7a384f33923d23d7f10d84763de0832b57bbd0a7ee96ce0eb9
SHA512
6fc21d95556cadf186bebffc37900196abd529dcdc6deb2e66266a2b1b3135ad8745a5039d75a6fde6141f2c0a575b10c8bd9a67f70533332b1c28235fa02b5b
SSDEEP
1536:soa1lMWiZyua3iCh7hCcNiJGoeEDLilzq7UlqRpOJKd:SMWiZyua3iCZhxoM9lzqcB8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2df8d25449ae3e72ad7df35201899ca3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ