?DelHook@@YGHXZ
?SetHook@@YGHXZ
Behavioral task
behavioral1
Sample
2dc130b1dc60560d45c0b75a3e715bb2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2dc130b1dc60560d45c0b75a3e715bb2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2dc130b1dc60560d45c0b75a3e715bb2_JaffaCakes118
Size
11KB
MD5
2dc130b1dc60560d45c0b75a3e715bb2
SHA1
b8b8feb244f02f72cafc741e2f32340e25c7d4c5
SHA256
0b05f4a2b1e47f934f2233c0efd3e1fa8ff7736679e12f7eb5f7302e67d0a0cc
SHA512
7d59f8c99615a139f6ac80df074b9c96c2ae99e62bf7aeff220ff5b9f894925d78eb4e2ae77c46f0865789e4ce1ac92fb0a0177d07a97fcdb84fc5ac308a9645
SSDEEP
192:gqbQPqm3cwvCxnpwAi9/zWUdmpZkXiLVdQXsWaWpBY9FeQStTpWJ:bY3XMnpNHVp2XZkSiFeQStTpW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2dc130b1dc60560d45c0b75a3e715bb2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?DelHook@@YGHXZ
?SetHook@@YGHXZ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ