VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
03467d8680f2ea77443f7d1515692a71_JaffaCakes118.dll
Resource
win7-20240508-en
Target
03467d8680f2ea77443f7d1515692a71_JaffaCakes118
Size
7KB
MD5
03467d8680f2ea77443f7d1515692a71
SHA1
10a08a79cbae118e957705cae696487268d099a6
SHA256
d003341339bb64473dda160d31b8e52f452ae265b0e65b9026ca798c8674ddc7
SHA512
70fe3f487bf895ee9ff7c1d4f9fc9926024ed86ebfe5864bac74b87a162b0ffe14c23bc082cc0c70dc986984951345677754f54b4a51eea21a06f3a24b678ef3
SSDEEP
96:Iei6Fo+79Spo+z8Ywthsoezz1xe+tg3qs8nwE2NhczYDIZR+hBXH:IwFT9YZlmGoYejarZmczY0ZRCX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
03467d8680f2ea77443f7d1515692a71_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ