load
update_load
Behavioral task
behavioral1
Sample
f65e71035af289361b641daae37cd747_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f65e71035af289361b641daae37cd747_JaffaCakes118
Size
88KB
MD5
f65e71035af289361b641daae37cd747
SHA1
2c9cd37990cf52f1d21ec2c65d5275e29782e350
SHA256
7fdca821951ba35832c32062102f32a625f51fa1a4046bae2b045b02c457d19f
SHA512
fa92749d37b7ee069070c342074728bd80143b7c56a9b894395c2cca387fed9dcac7ff4f4d237a5ee8e5b2e043a86f9c199f9ded80bdb5578eb995e43b2378dc
SSDEEP
1536:1lVk+3U7yX1ouFae7rMPA2LY2ftlEZYia4MQieBK46mv6JGqnl9ctBx:1jyzuFaeHqh1ftpia40iK999gtB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f65e71035af289361b641daae37cd747_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
load
update_load
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ