GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Behavioral task
behavioral1
Sample
82b277ff05a0cfd8a6715443f61a4242_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
82b277ff05a0cfd8a6715443f61a4242_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
82b277ff05a0cfd8a6715443f61a4242_JaffaCakes118
Size
24KB
MD5
82b277ff05a0cfd8a6715443f61a4242
SHA1
7a49d054642e971f2053eaa532036a55fd4f5fa0
SHA256
4374ae7c0b62bd78854c1a47735a00daf4efe17c00fc14e48af2ae0b1b806198
SHA512
b8e5582ed8abbaf3969fc6d358d905cd71199ded1285e3203bb617cd0292c0fd6ac3e8c9ba5ff118e67e5c551bbb180ee679b81cb6580041328ab29e52f4acce
SSDEEP
384:S5nhu5bsGzXQNhidN6QFw062UZEL4nLG8hkx8Yc6clbX4YluqLPjehBI:io5bsGjQTi+Qr/U2KGCkx8BhtLluDI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
82b277ff05a0cfd8a6715443f61a4242_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE