Outt
Sett
Behavioral task
behavioral1
Sample
2bfe42c929e9d33336ef3255400579f8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bfe42c929e9d33336ef3255400579f8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2bfe42c929e9d33336ef3255400579f8_JaffaCakes118
Size
55KB
MD5
2bfe42c929e9d33336ef3255400579f8
SHA1
1de4796c2bc7f2a84a8d68fa96fb3f80b2d62dd6
SHA256
ac0c77da893b0768a62c631c24701f25b4cd0921940d1545c13e9833732bc593
SHA512
f4f114f649a9d5750ad02d0e137d9c2d95207c6a51707f60f427c7e03410c28153722e82da18c0461a3296b83a311b60e2e046c0853d19f95779d03ff91c2aaf
SSDEEP
1536:soa1lMWic3v5drI69y0h8BGqNSEy3MdHIuoOg:SMWicf5drI6YG2DSMls
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2bfe42c929e9d33336ef3255400579f8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ