ISPI
UISPI
WSPStartup
Behavioral task
behavioral1
Sample
bf9b6faf54167e517458441d4fc77781_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bf9b6faf54167e517458441d4fc77781_JaffaCakes118
Size
53KB
MD5
bf9b6faf54167e517458441d4fc77781
SHA1
1b055fa12b38eadd6aa4359ec3ee68c4157d2215
SHA256
e0e423d2d113798489a45e3a6a5270ad02ac32c85a15259e5d7c459effce2ffb
SHA512
abb2e34cefb8cc1d281a61c3b41d83e9be9ceb1710df387b119dd4cc60e223e7d90878d1483aa13db94ec13a0b71ce10fa7232a2dc85dba24661a93091a5f746
SSDEEP
1536:UDYutQIfLJsp+G4Yr5r5j1hAdp4fk8Jdgq4:UDYurfLJsN75r3wEk2v4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf9b6faf54167e517458441d4fc77781_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ISPI
UISPI
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ