F1
F2
F3
Behavioral task
behavioral1
Sample
35320334dd3c22152c843dac82f8d808_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35320334dd3c22152c843dac82f8d808_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
35320334dd3c22152c843dac82f8d808_JaffaCakes118
Size
27KB
MD5
35320334dd3c22152c843dac82f8d808
SHA1
c443fc29eba12202423608ea5df697d2197cb264
SHA256
a5e3a08da9699368b49909cd771ad8ff8c6210eba5d0aae8d628b6a536a7b1ab
SHA512
03aee9e49b66f0e7b5e08f04e354765530bbde44eb8937771afbf98f57f3464e306a0da8517efe53df7b0aca1a81ffc9d693bc8f5d084f0312c9ff4cf1d448f5
SSDEEP
768:9zOvze3p1KcesZR5ru8N9Pw9NPQ+gireEa7+34UA3ui:9zOvzeScesZPzDo9a+q6o3v
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
35320334dd3c22152c843dac82f8d808_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F1
F2
F3
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ