CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8748a0e1964bf4e7faaeb267145bc3bd_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8748a0e1964bf4e7faaeb267145bc3bd_JaffaCakes118
Size
65KB
MD5
8748a0e1964bf4e7faaeb267145bc3bd
SHA1
a994c40235cb5fa078649b2a34ddc10f4bff1037
SHA256
c3b8825a14d01736d2f4b06fd3b1c17e6b0012cab939448b74df960e89ceccde
SHA512
613ee5ffa9784133314f90203885a3f98a83c8ddd22b84419ab2fc6068f1b1d703b58822fae9ef2013953e5a079bac2d8820d3dcd1ff462d3d5619c0f42593fd
SSDEEP
1536:IykzkagVnIjQj9gc9wf6cyDs7UNwbGcHSABav:IFzkaTjsgcvcyDsSwqn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8748a0e1964bf4e7faaeb267145bc3bd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ