CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d0e90d2e36885ed46a98544efc5f8f43_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d0e90d2e36885ed46a98544efc5f8f43_JaffaCakes118
Size
54KB
MD5
d0e90d2e36885ed46a98544efc5f8f43
SHA1
a2a2b7e850a6456f2a51c3f53da62b8e4a53871a
SHA256
694223cc59389092bb43bc31085f0d619a03b097dbe1c0eb2b4c12dfef06cd57
SHA512
ca784d75dae0dd66ae880311ee2808d94dd79f8178b76b2b54b96916206a6bd6a1875fa479876b38a6bf44e5b85ea9d547a9017bcc18879a8d7e0a172dc5b22d
SSDEEP
768:R73xlB/LOtoil+T5o2bt0ZXzBUaGKzOblnsS24+f3y5+WTIVgGXiNmZFCe6m/lH2:R75hT5o2p01hzE1a4032+AIpiN276mJ2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d0e90d2e36885ed46a98544efc5f8f43_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ