CancelDll
LoadDll
Behavioral task
behavioral1
Sample
041f9027121a16957d67491e211ce45f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
041f9027121a16957d67491e211ce45f_JaffaCakes118
Size
65KB
MD5
041f9027121a16957d67491e211ce45f
SHA1
b8b354eb89f61fdfebfd88fa75dc206d87d8cffc
SHA256
bb97667d7962a0e5978fdb8dbbf1b6d12c9ce9c49ef114280013d807fa0eed7d
SHA512
1808235f9c18060d46550089020abeab29e52d10b5fe8ec0744ffd272342c07da56975cbe2db518e1f9e141b7e1cb2b9c2b73e62a9fcd6a3140f4561aac5d72c
SSDEEP
1536:jS4eYYBafPhIk13pjj83cs7KUmYgE1GAN3:+RZUfSk99gb4Ygav5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
041f9027121a16957d67491e211ce45f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ