load
update_load
Behavioral task
behavioral1
Sample
195acd85df21b46c787388925a819697_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
195acd85df21b46c787388925a819697_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
195acd85df21b46c787388925a819697_JaffaCakes118
Size
92KB
MD5
195acd85df21b46c787388925a819697
SHA1
7540cd4a15cce456ffa43f3102380d739b899c82
SHA256
9eb3d85d449d77bdf5297da5c8e4d7b224edbf2349cedaf88c4abb84ebdd31d2
SHA512
7226b96f4293596d442263b80c025782b5ceac9b7414433fb1786ad70c628dc4aedb342db62875821a44499ab1edac40e4a17ec4fba02612fe16668b947f3765
SSDEEP
1536:Gabamnqq0pycQXbGdU7hMWPjcbsvMkl9A+fvdhATrGnCYphrbly5r06D8+AZ:fbamB0pA4U1h44vMklth/CKr6O
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
195acd85df21b46c787388925a819697_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
load
update_load
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ