Outt
Sett
Behavioral task
behavioral1
Sample
2f3c1b85ea3dee9e2278e6ef62306112_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f3c1b85ea3dee9e2278e6ef62306112_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f3c1b85ea3dee9e2278e6ef62306112_JaffaCakes118
Size
64KB
MD5
2f3c1b85ea3dee9e2278e6ef62306112
SHA1
1df30d2f8e0e12838f31b49338dfed66d86c4f5c
SHA256
709f8417d16e87ab784f92ee6923e9b3b3d5faa612534dfd8dbf5f8b9b19e339
SHA512
cb73dc647e9cf85b1ed84f88f35ea096e0c956e8dde7f0de6872b6f36cb6bea2242dc4d8aae2d4e4de257cf6352eff8635ce5b2551490c58ac484817be514c20
SSDEEP
1536:EG9RS0PkkJElhMZ55XzI+7do383c0wqrHW:EGvPdohy6MM07W
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f3c1b85ea3dee9e2278e6ef62306112_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ