_GetSettingsEditor@20
_LoadSettingsLibResources@4
_ReleaseSettingsEditor@4
_UnloadSettingsLibResources@0
Behavioral task
behavioral1
Sample
393668d09ccfef884e8dff04066196e4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
393668d09ccfef884e8dff04066196e4_JaffaCakes118
Size
57KB
MD5
393668d09ccfef884e8dff04066196e4
SHA1
d000dab696c696972e163a9eec91a79437d14c08
SHA256
9aac83a9953d9158f72a35a0ef924d5436bd6d66613224840f9028b9ce7676e2
SHA512
920739247bba5ab663c616160f77b32bf84904d3ed087ba59435d5bf6982701ebc6414563875149976a5885abeae43c6e2357faa05a884bdc8138264bb761e8a
SSDEEP
1536:MjRK8freoQND6Zw3hhK7leW+hjcBmssSTyT0cxgOa:2RK8zePaghhKs7avEEO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
393668d09ccfef884e8dff04066196e4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_GetSettingsEditor@20
_LoadSettingsLibResources@4
_ReleaseSettingsEditor@4
_UnloadSettingsLibResources@0
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ