Outt
Sett
Behavioral task
behavioral1
Sample
2d23e86059255d24c9eade371235e254_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d23e86059255d24c9eade371235e254_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d23e86059255d24c9eade371235e254_JaffaCakes118
Size
63KB
MD5
2d23e86059255d24c9eade371235e254
SHA1
b901fd6146064d4ea57b2bec14f519b991064ab7
SHA256
854b7dc60a53e3c259aaaa89d908f24cc31565f892f814462216b6aac45dfe6d
SHA512
d9270824c0d8122dc463166a7688315851b902f7d5b00cbc08a0bf9e4a1dbb7f75176fa4f3c0166e2b0f9567ae0899ae9442c4e88c42cc1f9657f458a8f91025
SSDEEP
1536:5jRmOb1aiogTOrp5Pg1bPuCN61E16v2Pv0WXjxOS:xfbMcylOuCNoo6v2PcWXjL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d23e86059255d24c9eade371235e254_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ