Outt
Sett
Behavioral task
behavioral1
Sample
2d6cba004cba8d658e339b4bae6bff82_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d6cba004cba8d658e339b4bae6bff82_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d6cba004cba8d658e339b4bae6bff82_JaffaCakes118
Size
61KB
MD5
2d6cba004cba8d658e339b4bae6bff82
SHA1
4197470339db98711f6ada7a7b34a9c8159f9d11
SHA256
b751e0f3e4fcf01d60c17a666123885d54a07c774b2327a5c972fe3575017ae9
SHA512
c16136ac4db82420444da856d158e641feb5017a3e02c75d3e30d1d6c23eb9f69f74c363908203bed0069d236fdf40683183e6ac88f3bd1024f675d5a8e1ca6a
SSDEEP
1536:ob8Vwn/2fEO0H2EV8UPlq/X32Ljl9B+bzI:oz/4EO2DVvlCmHlyfI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d6cba004cba8d658e339b4bae6bff82_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ