Outt
Sett
Behavioral task
behavioral1
Sample
2c6673ad8ac911374bcfe307d2965798_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c6673ad8ac911374bcfe307d2965798_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2c6673ad8ac911374bcfe307d2965798_JaffaCakes118
Size
59KB
MD5
2c6673ad8ac911374bcfe307d2965798
SHA1
a1fa0a908c54dcaede6de936b6712d99f08c4e75
SHA256
bb3c6ac2eb9c74b0181d366a373d41840d82f3590ffd198aa407a9696acd26dd
SHA512
f18523c18e7abdd8760e42b809436110dc822c62966d05b5734f88af90c8f5e71f637935b7986b6a81401bd35cbebec47a385e274b420f6270f4e6fa1b34db73
SSDEEP
1536:NGWJojWNBltXVEYkrTHIwZGMve/dxE1vqrUUlK:rJojWNBlYZGMvO84FlK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2c6673ad8ac911374bcfe307d2965798_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ