RunSetupA
RunSetupW
ServiceMain
Behavioral task
behavioral1
Sample
1bdfab6c28c34fd33177b6861df6143f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1bdfab6c28c34fd33177b6861df6143f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1bdfab6c28c34fd33177b6861df6143f_JaffaCakes118
Size
47KB
MD5
1bdfab6c28c34fd33177b6861df6143f
SHA1
5eb100f0ef5362161cdae398784c7b4fb771cf21
SHA256
0b2787c507d96ceacab45bed970c3c7b6a0e8b701f94d607762141012aa7ae1d
SHA512
fabed64afcf97b6ba8c34f61df0d9dcfa0627183d2905984256bbdd2580d45f0a9c2bbfc88f83d7dc157519a1f7e04290201b8673b65e8948b16dff76148a0d2
SSDEEP
768:Y9zHAfKSJ7ilgJcYWIATBo2A28se4pWtlNOEyOBDIQLeiHqDbEu3huCNtqQ7MBco:WjAf1J7xcYWbVol28sYdjBDDrIbXhu7F
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1bdfab6c28c34fd33177b6861df6143f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunSetupA
RunSetupW
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ