InitObjects
UninitObjects
WriteCommand
Behavioral task
behavioral1
Sample
f04b588440b7f4ca96d22e3ef72c5fde_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f04b588440b7f4ca96d22e3ef72c5fde_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f04b588440b7f4ca96d22e3ef72c5fde_JaffaCakes118
Size
6KB
MD5
f04b588440b7f4ca96d22e3ef72c5fde
SHA1
d34fad33f8f98bdb9509a3038d3ee83fd8c1a0ad
SHA256
565b20b32fa63059e1fe30471a499084b3986532e4260a0095f1c2c493cc8d6b
SHA512
01e4a8c03bf96d8f7cb04ea31fcf13c30cafa15dd4f2907b3cc414fbd67543b69a17250d6e7820a8d1e65020ead1f15551d84c52fddc168b3f4a85b436733f79
SSDEEP
96:DEWsmx88JeA/sVQZgAVP/WS/aiv2iAoPYhP6YeoSr:Df/88JJ/sVQZ9d/WGn1LYhPt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f04b588440b7f4ca96d22e3ef72c5fde_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitObjects
UninitObjects
WriteCommand
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE