Outt
Sett
Behavioral task
behavioral1
Sample
ecb46de7201efb90200fcfa2a9f46346_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecb46de7201efb90200fcfa2a9f46346_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ecb46de7201efb90200fcfa2a9f46346_JaffaCakes118
Size
62KB
MD5
ecb46de7201efb90200fcfa2a9f46346
SHA1
0d4d20c25472690374473cafdf60398d49839085
SHA256
59b7bbb57f20d4c7480286cd3349694013e87f9223b45a838ac5a1fbbbfe88e3
SHA512
fe25c6654c455643648378f130a876d4bf42c784f4d475e4c258f40a6610fbeb05144f367bc3d64458d73794d17f205d5dc778d9e187127f1e3c44aa24b7cde5
SSDEEP
1536:evSwn+Pmz0Ttegpn8W7lmhjEFW6g4Ei5H:Q+PmzM4gSlgg4/F
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ecb46de7201efb90200fcfa2a9f46346_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ