Outt
Sett
Behavioral task
behavioral1
Sample
2c17a5d390713b363397ee17515819fb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c17a5d390713b363397ee17515819fb_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2c17a5d390713b363397ee17515819fb_JaffaCakes118
Size
75KB
MD5
2c17a5d390713b363397ee17515819fb
SHA1
c73d68300d0cfca98e6a13d5da1db71fc0dcd056
SHA256
768de3b961b8cf911b04af7cc3ef13f224439fc6870e7e2a603ab68b4b88f6ba
SHA512
d095e237b26272eac15890a121224e552faf68de75c17a0213e882b019ace675e1a1e5abc86f886b696939c2e128bd06836d7755a7896abde7be8f60136a109a
SSDEEP
1536:Bm1NGJVGtkofSKarbhNyxrW5QP8spSuTARa+sJYulwN1uyXyxrE:kX0V4kolSzQ8spv4GJYuO1KpE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2c17a5d390713b363397ee17515819fb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ