active
baseinfo
downdata
ifact
ksafe
sjff
Behavioral task
behavioral1
Sample
e04ce31c4ce7bb073a43367b3451e201_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e04ce31c4ce7bb073a43367b3451e201_JaffaCakes118
Size
324KB
MD5
e04ce31c4ce7bb073a43367b3451e201
SHA1
40fed7246ffc9a574b93123bfd8cc3dd03489e04
SHA256
2e5a939c876f38374ec05220946f16c12b783438d73e2c482315c33aa2c3a311
SHA512
9d99eb57e7076ee55721ab60a742473d4f43f50c5e71acba7d592a50caed33a523323b57db61d29ff241187657d169c856b7a2baf8738ac430bbc3a0dde15fa2
SSDEEP
6144:l3aotb0RlehpR/od3Y3onVP8VNOyt518+FhSYS8WZpH910GT7/wc:Ntzh3/od3Y3uVYOe5uMA/d+GT7I
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e04ce31c4ce7bb073a43367b3451e201_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
active
baseinfo
downdata
ifact
ksafe
sjff
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ