Outt
Sett
Behavioral task
behavioral1
Sample
2f14db32cf7b4e8f0cdd1815aaa44562_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f14db32cf7b4e8f0cdd1815aaa44562_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f14db32cf7b4e8f0cdd1815aaa44562_JaffaCakes118
Size
54KB
MD5
2f14db32cf7b4e8f0cdd1815aaa44562
SHA1
d475c42983a5b5cd1bc2b04eb54d8451734f0377
SHA256
09e09b1586ed3195740b81b7c65bb4fdef8354e1dcf6433b12bcc3972190bebf
SHA512
15ac57b986b063f569d906f5b7bddfc9e7305dda94cc35401642034c318e9fbc335dc53a8e9b01540fa69c8ddfaafaf406705e687fcdbf1cfe1e05c8d21a3966
SSDEEP
1536:kQfr09rqwLOCVveHQNQrCn/uE2QZ1LIAWi:kQfQ9JB6qQkWE2Ro
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f14db32cf7b4e8f0cdd1815aaa44562_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ