Outt
Sett
Behavioral task
behavioral1
Sample
2e1c8fd3328c2bfb3435569fbee08add_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e1c8fd3328c2bfb3435569fbee08add_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e1c8fd3328c2bfb3435569fbee08add_JaffaCakes118
Size
65KB
MD5
2e1c8fd3328c2bfb3435569fbee08add
SHA1
25184650adcab4b50c14fc88a6b57c9f6af1c5ad
SHA256
2cd4c7408dcab82200d5149cd18f1f64887289478e262c3fe7292e3a4749226b
SHA512
aa50489851807e9a11b78a495d5ed016b88d5d86314f5ef27fda44fca37ca51f18314a6835830256c2f6f8c14e2c24767be19c39c4c0ff4a08d53481bc4ad190
SSDEEP
1536:MhBRVgrExucM+LJ3Kx5/l4m9qU+Zp51xUVcDhRBT7ICQHg6BSF9I6JNtm3L7jPjQ:cRRsqg5N4m9l+Zp5kVcVzICESnz4b7LU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e1c8fd3328c2bfb3435569fbee08add_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ