Outt
Sett
Behavioral task
behavioral1
Sample
2b336b2c1e2f5f49e3f823c96a55f95d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b336b2c1e2f5f49e3f823c96a55f95d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b336b2c1e2f5f49e3f823c96a55f95d_JaffaCakes118
Size
49KB
MD5
2b336b2c1e2f5f49e3f823c96a55f95d
SHA1
62d7c79bea8a4560ca064d8efb2a9de6609fb0b8
SHA256
decea8ae3ccc446e592c205a2cef1ca12b9daa98e4b302426c1b023c9efd6c4b
SHA512
0169b4e3d9b5c27478e33a8b05c8540adf45ed422215d3125df491aadaff02e1623dc89e67eb6bd96fc7401b316f20c1de68d3c36757f1fa626e52625b8bcf45
SSDEEP
1536:V2bhVnzMfcSYqLGXSyoc+kZdj5mB2+fYFVMxf3uM:W3MfoqLRc+m0B2+fYnkf3uM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2b336b2c1e2f5f49e3f823c96a55f95d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ