Outt
Sett
Behavioral task
behavioral1
Sample
2cde78dbb8860239a82770985e7df739_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2cde78dbb8860239a82770985e7df739_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2cde78dbb8860239a82770985e7df739_JaffaCakes118
Size
52KB
MD5
2cde78dbb8860239a82770985e7df739
SHA1
9cacc8d3974136b5e3f6ee160c48e5b3da6a6781
SHA256
3f2838c9510aba50992e2290f0ee49ae30142f65fad5c66a87b85331de4d4393
SHA512
55f2979cafded0fce5339ed2274171405f360f8827e7f5e36fa34a37f915cf4edab482fc15ba914874a4c9cc08cac0be56c7e826f317a5e75144e7fa7aef9312
SSDEEP
1536:1zExMwCGQ2jCcrvKKY2I/0JErVtPcM1IsxekIM:1I+wCGvGcrvnBI4alnxKM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2cde78dbb8860239a82770985e7df739_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ