PlgDestroy
PlgGetAbout
PlgGetDirectLink
PlgGetOptions
PlgInit
Behavioral task
behavioral1
Sample
0fa2bb02a764119e79654d2177ed6368_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0fa2bb02a764119e79654d2177ed6368_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0fa2bb02a764119e79654d2177ed6368_JaffaCakes118
Size
34KB
MD5
0fa2bb02a764119e79654d2177ed6368
SHA1
163ae0ea0cdc5c808bfb7cf6f1f96268a6ffa668
SHA256
47ef1e7feba9de151854fbdd0550ef4c804ba042f000d07556d723cc0f83ae1c
SHA512
4973afa9505559f86f68defcdf93de2954b91e869b7fa63953a911a7cd54910158f2ae189baaf73bf485f803ffbf5b2aad7763f16e1c884593bf2e7e83194627
SSDEEP
768:gN3cLOk7aAybk4EEft+atQRk6nqG0zOei+3Du1uiiVmU8:gN3cLtxyA+tXgqZxi1uiemU8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0fa2bb02a764119e79654d2177ed6368_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlgDestroy
PlgGetAbout
PlgGetDirectLink
PlgGetOptions
PlgInit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ