MAPIAddress
MAPIDeleteMail
MAPIDetails
MAPIFindNext
MAPIFreeBuffer
MAPILogoff
MAPILogon
MAPIReadMail
MAPIResolveName
MAPISaveMail
MAPISendDocuments
MAPISendMail
Behavioral task
behavioral1
Sample
15523d1f98ce6d9b7a1b3291ca1958e1_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15523d1f98ce6d9b7a1b3291ca1958e1_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
15523d1f98ce6d9b7a1b3291ca1958e1_JaffaCakes118
Size
12KB
MD5
15523d1f98ce6d9b7a1b3291ca1958e1
SHA1
03b31baca4eae8761da1efa20d4280c48823c52b
SHA256
59c1f410e1007a81273c09e8a6b1617f5d66c9483fe016fc707c8a14bc61b60b
SHA512
7fbe220158b15376bf370e9e4abf84177c0675b07b0576d6d7c7d3f74913af453de9547417b2e7e66ff81a6cf0b8f1a01b1053485f9913e81c119a2213152dc7
SSDEEP
192:2913LvzbpRm9DZhvZzDh36jQOLqf6viXlgJHZlw5ptKASNRX:o7vzb/yvWFnC6nlw5pVSf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15523d1f98ce6d9b7a1b3291ca1958e1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MAPIAddress
MAPIDeleteMail
MAPIDetails
MAPIFindNext
MAPIFreeBuffer
MAPILogoff
MAPILogon
MAPIReadMail
MAPIResolveName
MAPISaveMail
MAPISendDocuments
MAPISendMail
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ