StartHook
StopHook
Behavioral task
behavioral1
Sample
14d442fca1cb7ff71fc0c91cff90a6e2_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
14d442fca1cb7ff71fc0c91cff90a6e2_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
14d442fca1cb7ff71fc0c91cff90a6e2_JaffaCakes118
Size
18KB
MD5
14d442fca1cb7ff71fc0c91cff90a6e2
SHA1
08335c4210c529cc83702448d5576a021688a3b8
SHA256
357380f538fc23ac4105de44899dc42774835448929fdaab6ca2b110c172077e
SHA512
64677a0c7690ea7344eb7db00deaf98df38e90863a8575abfdb23fd5942c7a156c76a494fe43da21d4901ab03d4d00a1b303187842e950ba9b0b25d1189b02a3
SSDEEP
384:+n8oahe3T1LBQbXvBrd5MtVvKMzxJR1AYmDmrOOZpQo0SoQ:O8o51Leb/Brd5MtVvKMzx+YeOjQo0So
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14d442fca1cb7ff71fc0c91cff90a6e2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ