CancelDll
LoadDll
Behavioral task
behavioral1
Sample
43434ac71dfc442f2a481062cfa8bc85_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43434ac71dfc442f2a481062cfa8bc85_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43434ac71dfc442f2a481062cfa8bc85_JaffaCakes118
Size
78KB
MD5
43434ac71dfc442f2a481062cfa8bc85
SHA1
30f6733c02386c5a8f127dfa2f6c7739b4e5eacf
SHA256
264464b7effb3de122e82c752b8232a67252c91ba891f740d39288f42bf0bfd2
SHA512
a7544cc263a3d81b05cd6efe98e198d7d7fa78dc12f7a1015e71708687aadef4801953c213cc7bb0588b1d3e60866e4ec577c2b3497b027b1e5ebf3bffaf35a5
SSDEEP
1536:Iykzkagwv29ZaOiiVEXQJP2eHdWGVX90Bb9fRurNs/p0N2:IFzkaD29ZaOiiVmPeHIoXGBxwrNeh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43434ac71dfc442f2a481062cfa8bc85_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ