CancelDll
LoadDll
Behavioral task
behavioral1
Sample
076514aceaaffcac30dbbe201cc1e0c4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
076514aceaaffcac30dbbe201cc1e0c4_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
076514aceaaffcac30dbbe201cc1e0c4_JaffaCakes118
Size
66KB
MD5
076514aceaaffcac30dbbe201cc1e0c4
SHA1
60907ae02587e60d4913abac302bf962d29c02f4
SHA256
28f7c0c773a6b2f1fbf39726755391a9283c2f6f0f96b510458ce2d03d187639
SHA512
49cc2e83391e7d882cff0d7951cf869fd65b6f69f263ef560b3e460fe8c5bafecc37c6bcbbd621f7db8e03efb86004945e8dd74ca16c871c523890950bd91b41
SSDEEP
1536:+gK4oX3trmYXUT0bELjek7aPeLZGMYbhZvhtFdy:i4CxBUT0gPgPeLZGfbnrzy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
076514aceaaffcac30dbbe201cc1e0c4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ