DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
014a4e0f8b5d53c5fd19828160d71c20_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
014a4e0f8b5d53c5fd19828160d71c20_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
014a4e0f8b5d53c5fd19828160d71c20_JaffaCakes118
Size
321KB
MD5
014a4e0f8b5d53c5fd19828160d71c20
SHA1
b9bc8dd7ef8339deab56a744d2d789923b2d6407
SHA256
d6038bac11bd880dcb7c28aeab4148c281cff4f2f0e5c0bd820a332932bab544
SHA512
77c230ac73e7bf1c34fae9e0c33d695a146be8c4960d1a43ca75c9e4538fa327499a6ffee1b4091dda021f44fee23c4eb6e8956b091ee2ea6f18606c43cba91d
SSDEEP
6144:Vha8l+W0ir/7cF3DXWSH3YIoH7ljQu7ynn/kVRA2GgFiorZTd6u4GJOP/lP5yhYh:L3f/K3KSH3Zob5Qgy/N9p256u4lhyhYh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
014a4e0f8b5d53c5fd19828160d71c20_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ