Outt
Sett
Behavioral task
behavioral1
Sample
2bc1ff670182f32b264a03eecb80e51c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bc1ff670182f32b264a03eecb80e51c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2bc1ff670182f32b264a03eecb80e51c_JaffaCakes118
Size
61KB
MD5
2bc1ff670182f32b264a03eecb80e51c
SHA1
5343536b56348f99d82e8f1cbf44454d99a98c46
SHA256
377751f3e7ec3893686eb1d95a24e3a2d72bd6567f2b205a8f6745b93f7882d5
SHA512
a6ea79187d5c914ab8fb27566c182c37a308594401fc5ab03b4c04c3b4625a5dc0e72159bccbb641209ddc1edcb733759f7ddd36c50313b422abd9ca29796c3f
SSDEEP
1536:Bm1NGJVG0xugBAjADV4h58dnQBsfvOGAckeaSA41e3KbrC:kX0Vdx1V4h58dnQSvPAAC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2bc1ff670182f32b264a03eecb80e51c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ