Outt
Sett
Behavioral task
behavioral1
Sample
2ca53907eead6935c52d136d104b5ee1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ca53907eead6935c52d136d104b5ee1_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ca53907eead6935c52d136d104b5ee1_JaffaCakes118
Size
84KB
MD5
2ca53907eead6935c52d136d104b5ee1
SHA1
e25eac602e463db96f90027c6c35a3863938c0ba
SHA256
f0a33e48c7512e31cd3045bff283fc5b5a1019af7b185fb3283f967ed9b9e458
SHA512
191b77fd1b06c3cae738e099f0234b2fb158b349113033e10984531c0c5a8a37120bac1c74864ba7896107cdf94cd128d8360422eb4413a54440afabe281cfc0
SSDEEP
1536:YNnEY8hlM1QaTaJzpQ032pWhA1pP6yju0I9td7I9kuUrfUkfKMaVUjN:YrglMqaUabWhWh6yjIE9ETKMaSp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ca53907eead6935c52d136d104b5ee1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ