CancelDll
LoadDll
Behavioral task
behavioral1
Sample
29ae48b8451de72315344c6ef63857fe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29ae48b8451de72315344c6ef63857fe_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29ae48b8451de72315344c6ef63857fe_JaffaCakes118
Size
54KB
MD5
29ae48b8451de72315344c6ef63857fe
SHA1
c5c5e488ddb6a30ea3f02802ebdb34bcdbf76e33
SHA256
24382f02ea3871d3d1b8f59664d192a7876139ef14877ee43aacb0231fb0d1e1
SHA512
77d49facebeab476db38de89aa256da7b044cafa6f280524244a8c16c38f068366f35c4fa72e11b570b152853e912fe367c237cf8a13744518abfb43a1344b1e
SSDEEP
768:FPUwXWaTfRELlWC1GELAxlhAU6UjrtNb4Vst/T6/dGArBeUb8zC+vhKteco+:hXGa7ReQCZkBFbrT/elGwB/4nvU8co+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
29ae48b8451de72315344c6ef63857fe_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ