VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
09611f66218fc6c6585cf5605acca820_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09611f66218fc6c6585cf5605acca820_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
09611f66218fc6c6585cf5605acca820_JaffaCakes118
Size
7KB
MD5
09611f66218fc6c6585cf5605acca820
SHA1
f61d6abdc2f374f8929847429692a77e3255cdab
SHA256
499f6ada678ce81450d08f17c6045bebba1a9e62eae780c530f7b94e93f18331
SHA512
d0a18a3d3b781065ab0491ab83b2fa83f88d52de913744c2c06f4bbea72d41319450203159b82deb4dd47c7ae5b4f6a6c6f080387502ac2165410c665e04ce91
SSDEEP
96:nei6Fo+79Spo+z8Ywthsoezz1xe+tg3qs8nwE2NhczYDIZR+hBXH:nwFT9YZlmGoYejarZmczY0ZRCX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
09611f66218fc6c6585cf5605acca820_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ