Outt
Sett
Behavioral task
behavioral1
Sample
2be3f2bcf560b6240dfaa977ee6eb470_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2be3f2bcf560b6240dfaa977ee6eb470_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2be3f2bcf560b6240dfaa977ee6eb470_JaffaCakes118
Size
55KB
MD5
2be3f2bcf560b6240dfaa977ee6eb470
SHA1
b2bbc0996642602020d68350d6b0478941ca165c
SHA256
5481ccf9bae1326d32f5c873bf8208d9cdc961aadfe4686736ecbbb14f0964ef
SHA512
833f9ae148d4feb74f0f3afc82e08487128fdaccb9f5d6a1ad48d6a1e6e942d79a4a83a24427afbc67ee1e371852efd184a5c78c3344b0c77dbd3ee51223a4e1
SSDEEP
768:nbY4lzV/1w3Y1G3r+Q3PyUnqUZtrlXqWD5Wi41soZzqS47cH03X8K1:EGzTIE+XqEdY1soIcU1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2be3f2bcf560b6240dfaa977ee6eb470_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ