dca_block
dca_blocks_num
dca_dynrng
dca_frame
dca_free
dca_init
dca_samples
dca_syncinfo
getVersion
Behavioral task
behavioral1
Sample
a4f092c26c42574cd228c15dca74ab5a_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a4f092c26c42574cd228c15dca74ab5a_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
a4f092c26c42574cd228c15dca74ab5a_JaffaCakes118
Size
106KB
MD5
a4f092c26c42574cd228c15dca74ab5a
SHA1
80589be3f3205817f01cbb70bc843dda87204d59
SHA256
0aef3953bec03b39b2dd04900d6a4d375ff58409493319b1b72b6721a1382a69
SHA512
aab29d1476028749c84026d3755c865ae976dfaa2640c158e3d2297d53d77bc5b4e2efab5c072fa76e878f691720949529373c1aca648a4776d9b48e827e131c
SSDEEP
1536:EmML/6GaZQPfUqEFQbKquq9yqKOc7XQh9XiOe52TS9kYRym8MnO8nouy8:zMLeExEFQbKqB9yqKc9SOPtyp7lout
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a4f092c26c42574cd228c15dca74ab5a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
dca_block
dca_blocks_num
dca_dynrng
dca_frame
dca_free
dca_init
dca_samples
dca_syncinfo
getVersion
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE