Outt
Sett
Behavioral task
behavioral1
Sample
ec499d488c7cbdf18868b8ba70261785_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ec499d488c7cbdf18868b8ba70261785_JaffaCakes118.dll
Resource
win10v2004-20240319-en
Target
ec499d488c7cbdf18868b8ba70261785_JaffaCakes118
Size
65KB
MD5
ec499d488c7cbdf18868b8ba70261785
SHA1
4f92fc9590af48fe6e098da0e6f28ab5a4b5fcd2
SHA256
5b75987cafe3c30afa6603fbf309a8907b7c7c13219b2c3e5fd1fa3535b32494
SHA512
2605b555efa1f289fd53b47c5f746371e28696a9cdc73665a49a5ca79fb179c7a2ce0e0cc969c307930cbb80d36c03f36c51ba55ffcec44d503944b11261cd4e
SSDEEP
1536:Bm1NGJVGc1gT7toQaZIIBCUyZPaxtcSjfy:kX0VNGyQagyxc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ec499d488c7cbdf18868b8ba70261785_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ