CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f0313d9d1f90ea912610a014d0a64e59_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f0313d9d1f90ea912610a014d0a64e59_JaffaCakes118
Size
69KB
MD5
f0313d9d1f90ea912610a014d0a64e59
SHA1
bec19ef87a646cfd225ef4ae2bfc251caf9908dc
SHA256
be9279839fb210de492b90dc9e0075b22ecb35777e495ed84b4505a73588f965
SHA512
fc22ee9cf1da721c04a7059af1f680ea4e66aa7f2796346eb851791042ca22442f084add323a98884faba772ca3817d9f988147f91db19bd56996de2a9a10cee
SSDEEP
1536:hXGa7ReQC/lKzlApLAYEfpYaFolu696yYo:r7RC/l5pLAY8VKdbB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f0313d9d1f90ea912610a014d0a64e59_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ