Outt
Sett
Behavioral task
behavioral1
Sample
2b17739912d782cbaee3e22d2963bb26_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b17739912d782cbaee3e22d2963bb26_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b17739912d782cbaee3e22d2963bb26_JaffaCakes118
Size
61KB
MD5
2b17739912d782cbaee3e22d2963bb26
SHA1
6b6e96027c94f1b2014ac1b559c4e570a45fd340
SHA256
1f3c54493682ae5c9149a173a16464a2a50e8a871409a5dc8120fbc4f6c7c1ef
SHA512
895c69720c45572365547d864c67bb0933792d6d98fe541e1fce4c3082b43e5d3b385688b5c5862c656d4de9d6799fefe4f2a1290a32faef35c190221297c39f
SSDEEP
768:nbY4l/JO05Ta+5UFNKWEQZ2Z49w3JFNBlmb762YTwLA1oYNGvtdkox+xSmg:EGhH1uFNKWEk2ww3BY62YTr1kvTBZmg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2b17739912d782cbaee3e22d2963bb26_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ