CancelDll
LoadDll
Behavioral task
behavioral1
Sample
89516ed21ee2fa98b2d90e643f942fe6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
89516ed21ee2fa98b2d90e643f942fe6_JaffaCakes118
Size
66KB
MD5
89516ed21ee2fa98b2d90e643f942fe6
SHA1
7303623c63bb5634552a6bc8bdec45b8c2e1dfe2
SHA256
28fe7f2867ecf57d8f2b196a220e174cf15a3e45206d7f162e49fa0fc239f2b0
SHA512
7353f92573aca1ab23669440dc61a6014aceedf25030b21bd3d86c2f6cd8a527c05e0569b7c3ec3e271d14ff401e69153222e708ae93463c65fc703a341928f9
SSDEEP
1536:knK0jhOKw+bO9MCvdpZ8YBo09lSg2S/M7E9tR6ci:knNhOKw+AdBo0PDpM7gbi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
89516ed21ee2fa98b2d90e643f942fe6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ