CancelDll
LoadDll
Behavioral task
behavioral1
Sample
035fbd2822eb9ecdd250e23c2ac4f650_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
035fbd2822eb9ecdd250e23c2ac4f650_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
035fbd2822eb9ecdd250e23c2ac4f650_JaffaCakes118
Size
50KB
MD5
035fbd2822eb9ecdd250e23c2ac4f650
SHA1
d015d16b7655dc63560fbdfb93d8772794d3e448
SHA256
99d2569ebce5d4079f71301abaaeffb1173b0b3dbf6e94545b9348081d2cd532
SHA512
9929eb021c3da99df6af0178a9031ab2597d3a6c853c51c3d7b0b1edd2e9012ee57a0293ccbeaf26ddb5370d56bc1bf99f2cb76704506a9add605b865724f277
SSDEEP
768:ZyVdVZgrkggLE33/kfWpH7watBgWqJznoDpCEUdBmoOovjPFolMzbuYu:O/S0U/fRMa5qJspCEUioOoGW/uYu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
035fbd2822eb9ecdd250e23c2ac4f650_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ