load
update_load
Behavioral task
behavioral1
Sample
49725f4a915967e2c327101023c68514_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49725f4a915967e2c327101023c68514_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49725f4a915967e2c327101023c68514_JaffaCakes118
Size
82KB
MD5
49725f4a915967e2c327101023c68514
SHA1
c38901731f06b9f9bbb9a08a32d6ac58b1e6ee76
SHA256
6fa0deadb0d80a443aa99bdb8d17384d40b945045748e122353e22c86c9d948f
SHA512
4df3f03c18c43dbea28643109cf42d5c931e297c98b34ff1a57d6218225522d8b9da74ddb97979a98cbd60cbecf51c2031257383e63a6ace479c7d1eae6e2fc8
SSDEEP
1536:iAJiPzIzVUz1aW/03ihE+lcbS7+FOIUPF4ZpAtCnDIFHzdGb4vxLh:iY6MqBaW/0uE+lcc+EIrDznDSHzdGIx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
49725f4a915967e2c327101023c68514_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
load
update_load
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ