_Prog_HookAllApps@8
fnDLL
fnFND
Static task
static1
Behavioral task
behavioral1
Sample
23bb049ed33c548778af78f09b21f7bd_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23bb049ed33c548778af78f09b21f7bd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
23bb049ed33c548778af78f09b21f7bd_JaffaCakes118
Size
5KB
MD5
23bb049ed33c548778af78f09b21f7bd
SHA1
a55c714462de5332cb148938275610fd856f5c47
SHA256
02e65bb9f2fc689e655d6f1ed6df90541823a933be2fef3cf5d548f13d056208
SHA512
b364ec41db4d547e8b8c6527d2bcf789a752403113bebda0891f768d7cca21bd87a5b2248724a3ae852e3c777f74bdba65a13ba4b3e80a3a13e15913df4a090f
SSDEEP
96:AiJc5iMa4GyNPtirybfrpfOZUOQHRZ2Ws:AiJIiMa4TPti2b9fOVkZ2j
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
23bb049ed33c548778af78f09b21f7bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_Prog_HookAllApps@8
fnDLL
fnFND
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE