Outt
Sett
Behavioral task
behavioral1
Sample
2f5fc8d4c9b143e0c8059055700c49b6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f5fc8d4c9b143e0c8059055700c49b6_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2f5fc8d4c9b143e0c8059055700c49b6_JaffaCakes118
Size
74KB
MD5
2f5fc8d4c9b143e0c8059055700c49b6
SHA1
a2d2c28e09b84ff1524c93caa4299e7c43e73d4b
SHA256
bc430e95cb3a0deb9965c3d4f958ff7cf1bbefe462511db3216d482919f1c240
SHA512
6e2ebf038af813a941443e1e3590d4a780845c2ecd979b1115a312906aea7065c2081ea5025dc1fd910970aff08e38435b72c2ed2b1344453086bbe2cdf71c7f
SSDEEP
1536:RVoJnUt17J40Ri32u2uL0krrNKw3BthwYlirMW0lUkUMvMFlce:TEqS2u2uLDvYwzIrMvlUkUMkFee
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f5fc8d4c9b143e0c8059055700c49b6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ