no123mxd
off123mxd
Static task
static1
Behavioral task
behavioral1
Sample
2becc7748a24b219b92fac31ea2700d5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2becc7748a24b219b92fac31ea2700d5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2becc7748a24b219b92fac31ea2700d5_JaffaCakes118
Size
229KB
MD5
2becc7748a24b219b92fac31ea2700d5
SHA1
b6356e1faefafa1577f614b4ce3fcad4d6686908
SHA256
f05720f4e85ebca3665699c80322164637fa5721e6a716028c3dba537a07c619
SHA512
e961f8d4129887ca605041de8cbaae4f63d724a4abff80c3598cab4cd36a25692145a4d463dc9b07b0e79cd3001c51154f9a205b99e2e7669d1e8f56077b2a13
SSDEEP
3072:aFFDjH2Jm0+nLkuzV9Xoh7+CCqRl73rMBIxGQtwxL9CjA9JNfEouhIO5+he9BRWe:YFH1LZ5yh7GmrMGydEjALNxu3zWUV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
2becc7748a24b219b92fac31ea2700d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
MessageBoxA
no123mxd
off123mxd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE