CancelDll
LoadDll
Behavioral task
behavioral1
Sample
407ad0709303983276ca9cab23c40e0e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
407ad0709303983276ca9cab23c40e0e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
407ad0709303983276ca9cab23c40e0e_JaffaCakes118
Size
68KB
MD5
407ad0709303983276ca9cab23c40e0e
SHA1
4cea1168fa65a62be09d2f4da2f4dba9b8b0343f
SHA256
416002216a3c0d06cdc6cbe9fae173ed1ebf8f3616352dfeafeb4c1ebdccb7c0
SHA512
7699a7d8711bb33e730e2895e70ea3702982f8661062796880f92737f56fe72f4efe68bf13a20550f5c15a0c787b47b03a86382b9d3dbb22685a2a008567a732
SSDEEP
1536:IykzkagY9EfJ5vJhb4Erm2lf4eKIp/aFuI+ioM:IFzka/KfbvgErmsfgIpCzL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
407ad0709303983276ca9cab23c40e0e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ