CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4777000f16eddda886405193cd5ed02b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4777000f16eddda886405193cd5ed02b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4777000f16eddda886405193cd5ed02b_JaffaCakes118
Size
62KB
MD5
4777000f16eddda886405193cd5ed02b
SHA1
9af3f475b2263f25735765e33c65a75c0c620b4f
SHA256
0311e72512446119ec1dac003474c2e83bffc3b711b05b43eaaff4f8f48a7044
SHA512
50291477a8f5a3185990782b134111a1cd51fd8d93a71d8fa121502ca867baf506014eb30d4dbe7610f1eae4f81bd76264cf8c1eb9c42049f9bafb6442ba1081
SSDEEP
1536:knK0jhOKw+hhTmgVIo7b4shkA7a2sZwNqrdQDz8WB/Hze:knNhOKw+DqId7b4shkkaLZSqpxW9ze
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4777000f16eddda886405193cd5ed02b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ