CancelDll
LoadDll
Behavioral task
behavioral1
Sample
222238e14fe37c1f76900da567f55d30_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
222238e14fe37c1f76900da567f55d30_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
222238e14fe37c1f76900da567f55d30_JaffaCakes118
Size
75KB
MD5
222238e14fe37c1f76900da567f55d30
SHA1
9f318b23ab79ebb2767361124664c4c51130d9b3
SHA256
359ac42a912003e3266dba23d0413af981c560a802ff9342476aa0d1bde36d61
SHA512
e1ef8e576f94e1e2d9bb7a9a2cdb78ba6017a60250f65783b71abbc3f7e83ce36dced8d13ae4b39ac9bbff8071722daab6fc11dfd97f3fa8c0f600251a80c983
SSDEEP
1536:Iykzkagcw86a9H5CdcDCRMyhk4cWfpCzh0Z5jA/YXWNsZoQ4U:IFzka7w+5CdUrl0kQv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
222238e14fe37c1f76900da567f55d30_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ