CancelDll
LoadDll
Behavioral task
behavioral1
Sample
00362435e945d11975184ea79f6ee281_JaffaCakes118.dll
Resource
win7-20240903-en
Target
00362435e945d11975184ea79f6ee281_JaffaCakes118
Size
71KB
MD5
00362435e945d11975184ea79f6ee281
SHA1
171513b88d2b0a55b3fea1de49a5c9ac634a0f9d
SHA256
e974164d719b0385d14460b733f0b7f889ad797717dee82c7e38ac354d0a2b6f
SHA512
80dbf4f19bb201d5540e10b3384b9bc2ed53578ad592ec161922fe6c48bf537ce020963b2449b48ae78985f3ba03ed9ccd9a8b6440de2f39a0f136abfa54772e
SSDEEP
1536:t5B0Jq2IBxA4TFGFHIO95v/jtwl/8e4gC8vxPBV2+KhfV4u8n0HhS1eGXIlEhUIu:tjTbbTYFos5vGGYC8pf2+Kh94N0HhMnW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
00362435e945d11975184ea79f6ee281_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ