load
update_load
Behavioral task
behavioral1
Sample
b354a1f2fbdc5f0ef288fb36b8a9273a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b354a1f2fbdc5f0ef288fb36b8a9273a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b354a1f2fbdc5f0ef288fb36b8a9273a_JaffaCakes118
Size
88KB
MD5
b354a1f2fbdc5f0ef288fb36b8a9273a
SHA1
7f5a951a7f6b91e4365f1ea5398ba00ff4d34f3d
SHA256
a5f519d6bd74c7bfba35127b75bc2d99e7bf6ae732f51384d7770813fb9a828e
SHA512
121d85626390b240cfe4c38ad5fe60ea2702f320a845ee5665ca49d60896176445e577eafa6e99fbb7008c7407e23ccdc8cb713a244d03c83b6ee6668def58a2
SSDEEP
1536:t3iFSO4PACAipa0zRaxLRVsYB2s3cdCoWo399disw8EeZYGcRu44QWuR94c2R9:tSFSO4PACPRUX3oWO99diiJZYGck/jR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b354a1f2fbdc5f0ef288fb36b8a9273a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
load
update_load
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ