Outt
Sett
Behavioral task
behavioral1
Sample
2f239a95e3714d5e56293c42f34d03e2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f239a95e3714d5e56293c42f34d03e2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f239a95e3714d5e56293c42f34d03e2_JaffaCakes118
Size
53KB
MD5
2f239a95e3714d5e56293c42f34d03e2
SHA1
ba0ca7fcda13207706a97d0e816f1422e04b40fb
SHA256
07bc5e19ccbd36b8eeffa11f084c8ec6cb06abaf2b5d0a27f84d0959c97f202a
SHA512
fe8f79a1de3b84d12265d7eb35ddd58f5163e35227696d362baf4f446bf966a6234c8b4d8a4528f4e666598ca391e2fb53729e22c884b0ae49d7e743a25538c3
SSDEEP
1536:kjRUBHyxGnlZ6p0NXAsESSMgrv2etbIoteUy8Lax:kFUHlAIQn4Av2OIoBN2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f239a95e3714d5e56293c42f34d03e2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ