ISPI
UISPI
WSPStartup
Behavioral task
behavioral1
Sample
2d4dba181a8eb324da638b6f711a61d6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2d4dba181a8eb324da638b6f711a61d6_JaffaCakes118
Size
53KB
MD5
2d4dba181a8eb324da638b6f711a61d6
SHA1
b45201447dceb8bb71908ddfe1b0bcc012a353d2
SHA256
f8c610c4fcd0a447325eab32134cda8d8284ccb6f88179aa8bbccd462ec724ac
SHA512
176e66079381623418430576afe5a155f647b8d736b69068c97205be0d4bc93eaccb34f23a9c4ddbd8a31dcea4ca02e3ec4131f16a0a485d80f2e8b13d0d93c3
SSDEEP
1536:/DYutQIfLJsp+G4Yr5r5j1hAdp4fk8Jdgq4:/DYurfLJsN75r3wEk2v4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d4dba181a8eb324da638b6f711a61d6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ISPI
UISPI
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ