Outt
Sett
Behavioral task
behavioral1
Sample
2f79123ebb3ba4b3266ff7eefef24a20_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f79123ebb3ba4b3266ff7eefef24a20_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f79123ebb3ba4b3266ff7eefef24a20_JaffaCakes118
Size
61KB
MD5
2f79123ebb3ba4b3266ff7eefef24a20
SHA1
fe65ec9e875f4dcf887b2f5b63fc9b97f4995712
SHA256
2e1633d96e9f2479c12c4ee5dabc3994c8735be5a4ff5819a1d3aa6f16ac084d
SHA512
1c7d009465013d99ac3f156d69f690d6259a600e878ac8e401748db209695c39e97b4c6ee8180d9f7adde5b4dbf03bba5113e1bc98e174433909853a957779fd
SSDEEP
768:9xBtKtqyLU6lT5/e6rQN+JP/BBXgxuWe3WnBGI70ztCyEqhWwinuMAlIsE8AsrL:9Enm6rQNSp2WmBBqtRouM2tL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f79123ebb3ba4b3266ff7eefef24a20_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ