load
update_load
Behavioral task
behavioral1
Sample
6a4374f35fcb8ce6091839302db3f63d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a4374f35fcb8ce6091839302db3f63d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6a4374f35fcb8ce6091839302db3f63d_JaffaCakes118
Size
88KB
MD5
6a4374f35fcb8ce6091839302db3f63d
SHA1
96171de4e9a583af2cf1f348697b43bb36b06765
SHA256
c106484e24076c3a9cc4ff9253d63dff732b1207c5986f1203f56fda1bef17d7
SHA512
5ed4aed289b69843ac8401c0a31a18e3115fb4f642b3f0918fa0b526363b62989465994749963ef870a3f606facffef303a5399ebf5226e53cc53a8d7c9f7f76
SSDEEP
1536:WuKt5DuZt5hcUsRp5hsD6KCehjooD8DWA+Ewf04Uf9zJWJDUO1sFiP6aqBOfs/x:MDwcUGpdeuTDW4wcFfDCAO1RRq8Qj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a4374f35fcb8ce6091839302db3f63d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
load
update_load
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ