Outt
Sett
Behavioral task
behavioral1
Sample
2ca8877276b2f137b38d1608ea7b77a9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ca8877276b2f137b38d1608ea7b77a9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ca8877276b2f137b38d1608ea7b77a9_JaffaCakes118
Size
63KB
MD5
2ca8877276b2f137b38d1608ea7b77a9
SHA1
e9bb2d67bdf362232bfc45cf59d58449fd9c6e55
SHA256
19865886deaf1e4d23171d1c75a623bcbae2b125f7e3812ed2db1f0a11f741b9
SHA512
25d73ba2999f24bc2fa2b434954618b8d36ae736794f03f2a959ef5e5b4f67eb4ac78d2282f71890f2da56ed5ff10258d52b6459d57ef0b0c7c48d1081ab6100
SSDEEP
1536:23umoMtx3AXGp8p0XjXt3CXjU/sfUFjwD3inR/LdKC4cYn:CoMtxFp8p0Xgj0sQETiFL+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ca8877276b2f137b38d1608ea7b77a9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ