CancelDll
LoadDll
Behavioral task
behavioral1
Sample
94cc4451de8a96b7e898776418aed021_JaffaCakes118.dll
Resource
win7-20240708-en
Target
94cc4451de8a96b7e898776418aed021_JaffaCakes118
Size
47KB
MD5
94cc4451de8a96b7e898776418aed021
SHA1
95c869800fcd31f1cdb2c65597ad4fba0c37f87f
SHA256
83fc54ed1c2b06bc4785c8305490e53ed54efef370889816d4937ff1ef458156
SHA512
0c01692f1c6f51e21ea3bd6686fdd46aa7e866cf54d4038ee96b3f831d4c4895f04fa6487bffe3a36dbe2f2dc18060203750c0f5d3e9cc9d927de1bca36e29ea
SSDEEP
768:DVV27Pk2b+S9zwj3gVlCrPh4RqTJczaFgHW4lWmX1zNw3mnjUdrXqQVMxGBQ0h0+:DVV1HT26jFg9lBw3myXp3Btoto6V8L
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94cc4451de8a96b7e898776418aed021_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ