StartHook
StopHook
dh_ksHook
dh_tzHook
Behavioral task
behavioral1
Sample
0173563bd9e579917016e337da86b534_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0173563bd9e579917016e337da86b534_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0173563bd9e579917016e337da86b534_JaffaCakes118
Size
19KB
MD5
0173563bd9e579917016e337da86b534
SHA1
819fe7aabf3dac813241a5ea956fe4290866f23b
SHA256
3f9c64f8695ecb83273ec0fad682b60e313bbdf8ad5700c90180c6ca418b9de4
SHA512
cd06ba81941653d6f46990ae56aa3a0c7a7879d6da242172a596d2b0b76973e0719ac070b8ee0fc07698f6b05f9ffd0a130232b0bbd27ce4e5dbd474886a4dee
SSDEEP
384:2LXB3dl/a5P4EsISSNPVfPe+tDmg8Wq1Fzx9IDCpgOB07NYDOGO/wgvlvQ:2LXBtlinlLPBPe+tDm5WqfzIOpri5NPG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0173563bd9e579917016e337da86b534_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
dh_ksHook
dh_tzHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ