load
update_load
Behavioral task
behavioral1
Sample
484552570d2259d04d914e787209bd91_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
484552570d2259d04d914e787209bd91_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
484552570d2259d04d914e787209bd91_JaffaCakes118
Size
88KB
MD5
484552570d2259d04d914e787209bd91
SHA1
b0afd4f8e7e0de4d21b9601ed1b83fbbe88ee589
SHA256
cde4dbb2cb25f6765f07066c6f95f1ab1d1a890b5e0d8640f7b52410432590f6
SHA512
d886d5fbc698d2d3873cf7e7685b29573f9f55e0be7224e61cde6a5245d1d3df391dc4de709fb5368949ff4dbd4add9218aa446267dbd18d88d3cdb4a65d3ce1
SSDEEP
1536:3IvASmNm2uGiQ1q9pGWUbA2ORAAqAk2lmvZS1onOGzTsf8iURw02ogsOjifjLnPL:U+m2YJ9pGWUbx+qAk2v1o/zTsk1mcg4H
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
484552570d2259d04d914e787209bd91_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
load
update_load
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ