Outt
Sett
Behavioral task
behavioral1
Sample
2ebdf5cba474a142a8c4e7b99a81b400_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ebdf5cba474a142a8c4e7b99a81b400_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ebdf5cba474a142a8c4e7b99a81b400_JaffaCakes118
Size
55KB
MD5
2ebdf5cba474a142a8c4e7b99a81b400
SHA1
9e14dc5e642858865528f9e86b9a4587149b1638
SHA256
14cc725a477e2b1daee61cfdaefc3d95c6eeb763a47c00a48cf9f28287021a56
SHA512
aae85533d17d85b5c0049e7448320fb3d0553b792aa00f8e974f8db51f77eece4bbd869585ceda95c245402fef4e4815c2632796b0473f35e0def72c01794e48
SSDEEP
1536:yHZ2scWDx18T/rHQgeuW/uq2eIVanO7mw4ChFGH1hg:yHoscWDQsuq9IVAOV9iHng
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ebdf5cba474a142a8c4e7b99a81b400_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ