Outt
Sett
Behavioral task
behavioral1
Sample
2c2bb489b6982658d79d6e398826edf0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c2bb489b6982658d79d6e398826edf0_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2c2bb489b6982658d79d6e398826edf0_JaffaCakes118
Size
69KB
MD5
2c2bb489b6982658d79d6e398826edf0
SHA1
ff322834e03feb597c213573085626b9fe4c3ecd
SHA256
161b1cf750dcc25526c69ae027a48cc214c37fd9ee096ac382e1f8636490dff1
SHA512
0c8501be2d2f2bc113bf10843c220ac5285e62d7e14c1fb6a43e2fdc0c3bed7daf67df86bd4f53e55aa7533b9cdd1b6d7d68b94d33fbe02eec9677b26deeb5a5
SSDEEP
1536:EGUwftANLCvLcosjG8WYWYLlcMqeqt4Qxp79g:EGLlANujcosq8bLl5lqt4KlC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2c2bb489b6982658d79d6e398826edf0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ