CancelDll
LoadDll
Behavioral task
behavioral1
Sample
076f88cf8ce3158fabe3ec91c30a137f_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
076f88cf8ce3158fabe3ec91c30a137f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
076f88cf8ce3158fabe3ec91c30a137f_JaffaCakes118
Size
59KB
MD5
076f88cf8ce3158fabe3ec91c30a137f
SHA1
f31680238a39b5d51abf7c1d18857dbdc608ac7f
SHA256
7748a911d272a808d2b81ee2b1a3f8adccd074214cbde915bf41348dd79999ef
SHA512
d580b490eceb46b03698f23116e98e2c0a448f2bc202d8186d694bd7331d72eeed2129d5b7066eca38d2aadcd380db40619dbbc5bb1bc22deaeca73a0cca15bb
SSDEEP
1536:wAceoINVALxNrMnavUII5CRGKBKw1cYY82:wAcTqGTMnav25yNY82
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
076f88cf8ce3158fabe3ec91c30a137f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ