Outt
Sett
Behavioral task
behavioral1
Sample
2ee67aedc727733a99e81419a60c503a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ee67aedc727733a99e81419a60c503a_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ee67aedc727733a99e81419a60c503a_JaffaCakes118
Size
74KB
MD5
2ee67aedc727733a99e81419a60c503a
SHA1
0a5f309d4696811ac8df53df0672f7ad57950689
SHA256
2fd80e67ebab32ba8dc205e8c1217abdc6ff954d6549e92001f5bd11b89018a3
SHA512
82a32b55c57db6b15990c54a4cdfa08e9106578ab90116f2abbd345252c8b5ff8c33ade4e3c4512f4db8bea6aedd5c5b11e10206b1b673feb3f6dd8db15bd559
SSDEEP
1536:1zExMwCGQ2jjuM8E4YCbYONB184oT9spa9GhpSW1gYao6bSk:1I+wCGvXspX1CZsc9GCWU9Sk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ee67aedc727733a99e81419a60c503a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ