DeleteSelf
wdof
wdon
Behavioral task
behavioral1
Sample
5afbc1e357171377de0f5c0b76633559_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5afbc1e357171377de0f5c0b76633559_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5afbc1e357171377de0f5c0b76633559_JaffaCakes118
Size
21KB
MD5
5afbc1e357171377de0f5c0b76633559
SHA1
6935968bdf61664a5aca38828529a0a489ab5a40
SHA256
b6542b9bc0f45af1c55100e6ab0b42e98d8d90617af04bfd7fd7749ad293860c
SHA512
8a3c9aa9fd334a37f9c03a35ce4782ec8d3efdaf74a29ea9f615c3d512511999e562ab5b35b41f9acbdaeeb73f8d670ab91ff303c793d287d61a2f1fa0cbbba7
SSDEEP
384:1LRn+VYx+98uj1ZzBnt0wGDa1xYZ/4VhVjuu7n/HSbz:5GCEnj3Nt0G1sHuz/iz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5afbc1e357171377de0f5c0b76633559_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteSelf
wdof
wdon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ