Outt
Sett
Behavioral task
behavioral1
Sample
2e23a7179e6347c6c68f61a8ed8e6056_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e23a7179e6347c6c68f61a8ed8e6056_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e23a7179e6347c6c68f61a8ed8e6056_JaffaCakes118
Size
62KB
MD5
2e23a7179e6347c6c68f61a8ed8e6056
SHA1
bb82b139d9ab7c2e921ecc9b2ca812fa66ff2a71
SHA256
7317d64569b321046113986f2d618d3922a8a3277c9558a46cba9e0dec963d8f
SHA512
0c4b378dea8cf30257487549e5d3bf5d180d09ef9ef348d21ac421605f39d9455de5155cdb309fee37cde1cf51a22afc99cb2ea3535291e2f2d5becfb900be41
SSDEEP
1536:GQ3tfgXKAdLZ7mzBvynvSctBP57XN7wFqeHO8qowXYJfb4:VfgXKQLZfnvScBBJMY8O8qoVl4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e23a7179e6347c6c68f61a8ed8e6056_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ