CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2d521a4fa6ccb7b9968d9c9b7bd260ec_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d521a4fa6ccb7b9968d9c9b7bd260ec_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d521a4fa6ccb7b9968d9c9b7bd260ec_JaffaCakes118
Size
65KB
MD5
2d521a4fa6ccb7b9968d9c9b7bd260ec
SHA1
79f1ef0fda8355f1db66b7fec6b2c1b41921eb96
SHA256
92831c53bbcd2533e25683ab9b361a79c34011c2c2a08e886678de28ec7786cb
SHA512
7b9b6e4b98ae3678e294c9273c410e013f5dd49088029564ac82864917d80d331b408515ccc5a468f7080d2b63a3f86f7a1b63f809dd0a7fed1a32a6908cfa15
SSDEEP
1536:IykzkagHSYgbGrxn5Gy5tb6OkTdQR3a3QD9:IFzkahYgbzMbCTdQR3agD9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d521a4fa6ccb7b9968d9c9b7bd260ec_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ