CancelDll
LoadDll
Behavioral task
behavioral1
Sample
245baada225fc281c0e29fbdd234390b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
245baada225fc281c0e29fbdd234390b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
245baada225fc281c0e29fbdd234390b_JaffaCakes118
Size
68KB
MD5
245baada225fc281c0e29fbdd234390b
SHA1
5ed7ecb7307ceaddab05ca5325469f25926a591f
SHA256
434a4f687598897694f8d9bf7a714e87cf26f5c42824060442df102977661e6c
SHA512
669ae1b55004d34a35023e7aecad55f9762146b45df93e3a6ea6533d2fc056b68d4c11143ea857e331853e5b0736a6c14bcb657c192bc534becb2b4fa2d6d135
SSDEEP
1536:vxKNIuYi3uYFg6Dbn36o7sdoCTgzQsoygi1p9tQdZmFER:v6Yi3/5n3H7sdoCTg8soap9Sm+R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
245baada225fc281c0e29fbdd234390b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ