VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
05afdb11b66d2b6a2397ff63bc299dee_JaffaCakes118.dll
Resource
win7-20240611-en
Target
05afdb11b66d2b6a2397ff63bc299dee_JaffaCakes118
Size
7KB
MD5
05afdb11b66d2b6a2397ff63bc299dee
SHA1
bfed1b34d83ff77b2662e0e0605fed1d327101c7
SHA256
cd519e54e641c72d47f0c5b9247aed32519cb534d1c5af091fe46b8cf0d68052
SHA512
c24c9a331e63c902d015cb2c738b85488bcc652ed685b95cffa39cc5d7010cd41388a9b9102d1da0f7723c00a884b2ed304b295d04934068b49136eec6d06367
SSDEEP
192:fK3VhSuBMc+7+8nJ2JCt8NnO5zpcv5Cv6gi+Q8A:fHl7+2wJYsuSxCSY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
05afdb11b66d2b6a2397ff63bc299dee_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ