Outt
Sett
Behavioral task
behavioral1
Sample
2ac4cdc6790750c1f5cfa37a33e41a2d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ac4cdc6790750c1f5cfa37a33e41a2d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ac4cdc6790750c1f5cfa37a33e41a2d_JaffaCakes118
Size
71KB
MD5
2ac4cdc6790750c1f5cfa37a33e41a2d
SHA1
6bbb5f1c1441e4838ae5b465b674395a3f1b0573
SHA256
ab406511a2583e5d5536c61de3f41ce77eab6f7b68a023469ce5218a8e00e181
SHA512
217f2754e7cc26caa770caa6c9656f34acfdd2f28126d169f7662bd9a93dd6fe6309ff8f46bb879a28b90fac445c9bab7a9f0b302a14a9b616e68b0a3f77bf05
SSDEEP
768:9xBtKtqyLUAhZHiGOlxo9DPmAApzr5Aa0moWXwjxp6PXeb/I93yMxj+o84dz9YyO:9SZro4D0pAabNgtoveDq3ymzh1ZRJo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ac4cdc6790750c1f5cfa37a33e41a2d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ