CancelDll
LoadDll
Behavioral task
behavioral1
Sample
07250492c5200b26ab4f26e707df48f0_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
07250492c5200b26ab4f26e707df48f0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
07250492c5200b26ab4f26e707df48f0_JaffaCakes118
Size
70KB
MD5
07250492c5200b26ab4f26e707df48f0
SHA1
6901c7b010c91ee427e671a97d2fd773baccf5ec
SHA256
40fa42dba9dc143abf756b7772ec91b02734c1b12e8b3d902e04665816a7c98c
SHA512
69108703f691cf3e57013ef24248e4c82f13cdbf38dc73c1b1dfb6e67171d4df4a83ace00ac974df25f2b287682a2f1030ebd1825c0a553efd44c6b501df4581
SSDEEP
1536:Z6yEOWXF+8OGGDqk3uMPDSlWmQXlayhDAlgKpvt3RRwFF9b:Qc3FdWmJGMXlbhDAjdt3LwFj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
07250492c5200b26ab4f26e707df48f0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ