Sta
Sto
Behavioral task
behavioral1
Sample
ebc62e93a5e90f894691e7985dbcf587_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ebc62e93a5e90f894691e7985dbcf587_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ebc62e93a5e90f894691e7985dbcf587_JaffaCakes118
Size
18KB
MD5
ebc62e93a5e90f894691e7985dbcf587
SHA1
b98c65392d48578a3c82f8dd8dc31d68c6dac5ca
SHA256
71f22f24805843487c41ba98b35f732e9c7cf141fd475545c8426c41e3c9891a
SHA512
437cd48c2276c768ab3d5768345df0f4085904d47c033d99d13530f95ea970dcc82aaba83191d39ecaeb33847d900d2274931d045bd461d3fe7357a81a935ac9
SSDEEP
384:hdQo4L3yW+hfVVMB1Aj5gXCwx6WoajvN8VB47CZbQBPPMdxJO:hOkhPMB1+gXCi6WnKXjZgXeJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ebc62e93a5e90f894691e7985dbcf587_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sta
Sto
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ