DllRegisterServer
ServiceHandler
ServiceMain
Behavioral task
behavioral1
Sample
25b4f53e2b441d18df560cebebc06be7_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
25b4f53e2b441d18df560cebebc06be7_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
25b4f53e2b441d18df560cebebc06be7_JaffaCakes118
Size
94KB
MD5
25b4f53e2b441d18df560cebebc06be7
SHA1
49a04e5975d4058b66305ccc372811eea8d356a1
SHA256
ee48eb5538418a68b50db8cde4483110f156ed5f70ad714cc16bdd8c822e89eb
SHA512
5bba3c38766fd63e644d2d0bd2ff489247df8e9482583730620241d56afccdd189a8ca98066d922e3ce5ee98ea6317bcd5d72a804eeb9209c5c5cc95364b0027
SSDEEP
1536:mGky8V4yKGeRbxMnciZ+MoKYbEjMWZUrmWVRrdTfm9ZcjXeDJ7TBGoGC6oib9E:mLdVeROnci3obBaWXrd7mwbeD1/1zibW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
25b4f53e2b441d18df560cebebc06be7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ