?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
Behavioral task
behavioral1
Sample
40614313eb83db2cb78d4022b094d074_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40614313eb83db2cb78d4022b094d074_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40614313eb83db2cb78d4022b094d074_JaffaCakes118
Size
29KB
MD5
40614313eb83db2cb78d4022b094d074
SHA1
84ef19366e4bb3cc284436a544062525422e220a
SHA256
5eb49e9efb5df71095fbdaedeca2e45d0a2e2baa8ceb831b55c5f8abe56df0e5
SHA512
a19ed44e34f818076a97ea725da37763a4e42c68d9f655ae1112b4c82af81fce227798f11141cb69ad1c8fa07c7ecb927be84260b0070c862d17f9076deba24b
SSDEEP
768:SO0TQcLJmrdm/Z15glHHeAvso2fLMaFd:SO0TQcLJ4A/Z15uHHeAx2fRF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40614313eb83db2cb78d4022b094d074_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ