Outt
Sett
Behavioral task
behavioral1
Sample
2e45ac593e93fcf4d4c0cdb942e65529_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e45ac593e93fcf4d4c0cdb942e65529_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e45ac593e93fcf4d4c0cdb942e65529_JaffaCakes118
Size
65KB
MD5
2e45ac593e93fcf4d4c0cdb942e65529
SHA1
0919bc7b48e6664c8c90578165785b03e333b39e
SHA256
683346e691e9917496257d044a0e5e7a4b6df3386144cfb62feb7378eee71c99
SHA512
5b823a6db3c7954907316bb757f4d508bdc641b5149087a7ee3f039ded3fa0c9ec12863219c8d15896db5d84ea97028deeaba971682d08729bd222ca4e0affdc
SSDEEP
1536:jZIcCxR+VvM/RI+wE3RHK8BcTQ2EyPybcbfbvV:x+MVvMZIqRHWEyPyQ3vV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e45ac593e93fcf4d4c0cdb942e65529_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ