CancelDll
LoadDll
Behavioral task
behavioral1
Sample
33435f1de70b4ddfd9abd3d28584a090_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33435f1de70b4ddfd9abd3d28584a090_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33435f1de70b4ddfd9abd3d28584a090_JaffaCakes118
Size
62KB
MD5
33435f1de70b4ddfd9abd3d28584a090
SHA1
6a73f462ff3d3fe139787f65d03821ea6032349c
SHA256
286f1bfafcd7b937d8c7c700e1e9079c87d34e94eb89676b8797eafde638f338
SHA512
10209b7c4ebf5c6e811148b0289e8042438baa4e38eadf1d541f38a6a93f2b90be80b5f85f80c88d33884a9c4dfc23a847da870c2b6295ffec0ef2f8a288789d
SSDEEP
1536:9HF3cPoVuHC586KyaQZrcNGEpWXvGQUFp:/3cPoVq65s6vGr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
33435f1de70b4ddfd9abd3d28584a090_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ