Outt
Sett
Behavioral task
behavioral1
Sample
2f7c4a37e4356321ea831450b9df4a26_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f7c4a37e4356321ea831450b9df4a26_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f7c4a37e4356321ea831450b9df4a26_JaffaCakes118
Size
57KB
MD5
2f7c4a37e4356321ea831450b9df4a26
SHA1
0e673b3b5e1f7fce86d9a73bb7389e9d6af97bb6
SHA256
239620e4f9b38f16e9d3736c55f640847c33b5e0d1160f467bd635a5b151133e
SHA512
a6bf217ab442bd48903d78ed30903981881d0b4e045332d56abfb7295c3c5c156dc6ceb9ae6d2b4ec0cdfbf42a9f7130ac5f3d543a44a5433045dd201fcd2315
SSDEEP
768:nbY4lGyMPMDnr05GOOsvQ/wyDvLGBrBFN7BhRJWjyjExM1Qc8rob8lPSkcAw6:EGNGInrAhOgabDvqBzhLmvcNJ8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f7c4a37e4356321ea831450b9df4a26_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ