Outt
Sett
Behavioral task
behavioral1
Sample
2f2beaba5681a3319e825d98b961eae1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f2beaba5681a3319e825d98b961eae1_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f2beaba5681a3319e825d98b961eae1_JaffaCakes118
Size
54KB
MD5
2f2beaba5681a3319e825d98b961eae1
SHA1
1dce9aa2a38a572002b2f4dd45544695b5066f20
SHA256
183465bbd542987e3a4c2b685aff5dab202efe0a2dc106439e81cbeceaf673dc
SHA512
18b5e60c738d727f34bd75b5464eb56784a4ba36a0958ae8a97cac1945cb7e60953a6e4a317d31d890360ad3a2e8403f95bf2c121297eb35607abcf44268a491
SSDEEP
768:d61guqcmwVeMXtL+UctJhQDP/pGNSdH5L0kLwxa9okDDZs2irgMRyQ99w:agF0eiyUcb2JGUdHH/99inRy4i
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f2beaba5681a3319e825d98b961eae1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ