Outt
Sett
Behavioral task
behavioral1
Sample
2cb5d2d54eae60aa3d21eccfaf1f7b13_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2cb5d2d54eae60aa3d21eccfaf1f7b13_JaffaCakes118
Size
46KB
MD5
2cb5d2d54eae60aa3d21eccfaf1f7b13
SHA1
3cba329dfc982d518af0ccda2c4f9e701d10ae14
SHA256
3472701b6872982112fcd58c12c6f74b8a00c203319ec99f223a51759fcc59f7
SHA512
d30c6017e11e67915173f4d5009351d2c2c08548c88372ec4c61647a531824058a44110d84b3a1616055db514bea5e6036bb7e3964765f0e1bd96ef4d7a21b31
SSDEEP
768:9xBtKtqyLUr9cqKqXRueh2uCGvGBTYfZWL+XknzDxIjAoLhhc+2Iq47:9PJth2uTGYfZ3XQzDWjLRoe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2cb5d2d54eae60aa3d21eccfaf1f7b13_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ