Outt
Sett
Behavioral task
behavioral1
Sample
ec568dc674f5ccabbe9e560cdbf1316b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec568dc674f5ccabbe9e560cdbf1316b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ec568dc674f5ccabbe9e560cdbf1316b_JaffaCakes118
Size
50KB
MD5
ec568dc674f5ccabbe9e560cdbf1316b
SHA1
85bd7de443c5ef12205a377107e0d70b173720d3
SHA256
50d5bb0131ced230c37dbb9c83beb393b0eb4a9a839423caca2b6a274250121d
SHA512
aab47d3adf4861237020b12f83f59b33ff199e51be8ed2060df32f83eb9ead6ed791271f90e76aea22c8aa5c2f99c6499aaebdf8700ecfcb76d2fa7659dfc43f
SSDEEP
768:M2tWGdRJy5JSdJ03bPfwgsRK9PLIep/L/AOWcwgUV8XTdfi/sTAjeC5aScGmjtYi:Mq/JmJSPAIgmK9Mep/L/FwmTAjv5Stsq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ec568dc674f5ccabbe9e560cdbf1316b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ