CancelDll
LoadDll
Behavioral task
behavioral1
Sample
059ecece75baf36207d5d169312994c6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
059ecece75baf36207d5d169312994c6_JaffaCakes118
Size
58KB
MD5
059ecece75baf36207d5d169312994c6
SHA1
de94462bbab8249db6505c4db067de11203746ca
SHA256
91d6945765e1efabb6213cdc9e3f8286ae63909238b24f4cb9aa9e6e9ce9eef2
SHA512
f721f425c49510b1daf08e49f1d075b6b977f9c723d2a5c9229b6ee7bee52b0aa52f3794e87a91bd278827e0c1ea9ff4c0527215d14ee139fb987c43444e8ce5
SSDEEP
1536:Jd8cHHQRWZ1MklBeBgqcvjjY4JTzkN6/gvSm:jfHce14fcvYqT6hP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
059ecece75baf36207d5d169312994c6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ