CancelDll
LoadDll
Behavioral task
behavioral1
Sample
00cc55eecc4e4d4f7221ee75e5bd7a2f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
00cc55eecc4e4d4f7221ee75e5bd7a2f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
00cc55eecc4e4d4f7221ee75e5bd7a2f_JaffaCakes118
Size
68KB
MD5
00cc55eecc4e4d4f7221ee75e5bd7a2f
SHA1
6fcfe8e45d265c95f8fd9f60941913c24fb9d518
SHA256
7cd72fbf3bce93c00bf1f1d1cede018825e907b0b7f219398689a4b29ed1bf35
SHA512
59b68d0f787de2eee8c7b846c8734a9a13bb1290aa22656bdd06956e44c0f1e4321ae3ddcf2d8780df4356ad93c48bbc5778841ff996e1cbf4a71a9aa37a21c4
SSDEEP
768:Fd4+uEl4vq6IrpbR0FUO8QEQm2E6QM9epiv/cQXcB3Ofjf5d9aFPQp9ecvKgDS69:s+j6Ir7GVZyeK3OfDUQpAqTrJc0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
00cc55eecc4e4d4f7221ee75e5bd7a2f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ