load
update_load
Behavioral task
behavioral1
Sample
a4630b8b13e400225be47aabed4d7f3c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4630b8b13e400225be47aabed4d7f3c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a4630b8b13e400225be47aabed4d7f3c_JaffaCakes118
Size
88KB
MD5
a4630b8b13e400225be47aabed4d7f3c
SHA1
83cf550d335caf9f22445d5e31e4ce71761a958e
SHA256
032992a2c3636dfdc9f7c7aa6c1e8d04b5b1c99317f715498b4eedb97edb5c99
SHA512
001abf025cf015f42e6f0b6036fcec48c3b8d82e400cece53964caa54c6714d0d83affc79007b1433a53f78d451e54f847257c303dfb34d74eb0ce79e6f3b2c2
SSDEEP
1536:Fe15QNfXIn5MKqf6X6yMYlnsBcdEjJ9slp1uxbQf+F8reqDWIqruSqhGsbXvr:Fui1RNisYFsBRj3VFQM9qCILHVXv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a4630b8b13e400225be47aabed4d7f3c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
load
update_load
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ