_FMODGetCodecDescriptionEx@0
_FMODGetDSPDescriptionEx@0
Behavioral task
behavioral1
Sample
2ee236049b15d36ab8825153e3396693_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2ee236049b15d36ab8825153e3396693_JaffaCakes118
Size
77KB
MD5
2ee236049b15d36ab8825153e3396693
SHA1
152b1a903ba5ea56dba47df32c19ffb091d35fc8
SHA256
9ae8a9ebfde82426008a1a31612ce1be1f76d4317810341acb9d67c302ee2484
SHA512
b9cb6be60943e16b80b1f04e46f129a0bad5c7e2886227d9bf38bc1c8089e3ca72ea4b7f700d2e30a291ee63544cb521b26747d8abe5ce032402b989654fbfcd
SSDEEP
1536:khNotHybgLvGhDYFqthf7DlW92wNFqRJqtbeZSMC5P8Wfrn:kh29yZdcqjlWZqJPxCJ7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ee236049b15d36ab8825153e3396693_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_FMODGetCodecDescriptionEx@0
_FMODGetDSPDescriptionEx@0
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ