CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fecdf99d951dd680975de765f058ceeb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fecdf99d951dd680975de765f058ceeb_JaffaCakes118
Size
59KB
MD5
fecdf99d951dd680975de765f058ceeb
SHA1
3e99cdd7f24930b8574c547ad263c30e9ae05e12
SHA256
b90f2d065bfdbbebcebbbdce5b47fbc85146eda3f5a856da6b7a72f209e455fa
SHA512
b5c3b6b8d6524a8d11001dfeb7501cd76b909370de459abd964a807735769884689281665fe6d6ae5f04e04117a7e14322f942b225e7a8604124ce44733c3df0
SSDEEP
1536:Z6yEOWXF+PiE/v2OD6IsVZ8OgMaGeyY5bqY4wVjuX8:Qc3PDeHIi5gJyomY4+aX8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fecdf99d951dd680975de765f058ceeb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ