main
mainA
mainW
Behavioral task
behavioral1
Sample
304c39ebd7857318174a5e2ddbd5549f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
304c39ebd7857318174a5e2ddbd5549f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
304c39ebd7857318174a5e2ddbd5549f_JaffaCakes118
Size
21KB
MD5
304c39ebd7857318174a5e2ddbd5549f
SHA1
6796b76d682f12633c76aceb8192b1715794fa4b
SHA256
04bfe3f7674e1d72b3946587950f306acd9b38bd29c2f7e78fb4de136557c11b
SHA512
0142f9e07c478c2edddb231e46004322c71d79159eae417c4ad9d2505de15cbf0094c3dea599f2f3d840b5caa82b3a856368bb48182ad55708f644c7504e3cbf
SSDEEP
384:xvldBo66siPovGmwkpDhwjHk+u5GMwqlia2miTYE1FeIGD2:xvldUlPFm7hwjZEt7SEEre6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
304c39ebd7857318174a5e2ddbd5549f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
main
mainA
mainW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ