DllRegisterServer
DllUnregisterServer
ServiceMain
doit
Behavioral task
behavioral1
Sample
291a3b03d4b077c557d4de89f1867e92_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
291a3b03d4b077c557d4de89f1867e92_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
291a3b03d4b077c557d4de89f1867e92_JaffaCakes118
Size
329KB
MD5
291a3b03d4b077c557d4de89f1867e92
SHA1
d7d46cccdaf88a7d4eef0d68d3e1a28b4cb771dd
SHA256
642249a07ca13a7fd8dba5899c4f5235e39856833491908085ebbc0c9f29e89b
SHA512
ad367eb9776cd04c08dfb124d49a4d0332d9825eb0a311467470b438a1ea981a7f408a32b15b8cc97b955819269a1cb18b1d0af19551dbd04f95644418beb407
SSDEEP
6144:lxkG+jxZw1bssYKdjRJdXQjY5D5XEDOpzUcBQHxRjwU9BhZa5RyTE2mCNgX9ODp:lxkVHsYKRRJNCYkDQyRRjwUrazywfbXM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
291a3b03d4b077c557d4de89f1867e92_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
ServiceMain
doit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ