DllMain
WSPStartup
Behavioral task
behavioral1
Sample
28060e93bf018196480d934abfb4c3c5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28060e93bf018196480d934abfb4c3c5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28060e93bf018196480d934abfb4c3c5_JaffaCakes118
Size
10KB
MD5
28060e93bf018196480d934abfb4c3c5
SHA1
53dbd2eeaf977695e28b91edfdaeed63a0aec9d4
SHA256
117b86db6c2c83525a3e2c84a0d3b5909862544611c3a8dd1583b17e6ff4d704
SHA512
5a13560469856dfef3b2699d62c2c30e59ca3291270f2f432b6a9be619ac108fd195408caecc3d9d3467d34c69daeb839bb9c7d199069f981d92f6776cffa4d5
SSDEEP
192:L5gEKMycm6eOKzhrcILczc2RXctJwOsMHdXpjdWE/p5YYLPKaF+Gmfub0:L5g7Mc6eOKtBLczxXk1UE/ftNmfX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
28060e93bf018196480d934abfb4c3c5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllMain
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ