DllRegisterServer
ServiceHandler
ServiceMain
Behavioral task
behavioral1
Sample
2f620f86af586edfe4fb5a39c6aee4fc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f620f86af586edfe4fb5a39c6aee4fc_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f620f86af586edfe4fb5a39c6aee4fc_JaffaCakes118
Size
29KB
MD5
2f620f86af586edfe4fb5a39c6aee4fc
SHA1
f0505419d943127db29ffff722ab8ba47207f674
SHA256
358c9981e650233283f371af968f15f8bbc54242995de62bdced4f98280a7f0f
SHA512
7fe166540d4050a63f40223c7b30b9939d2d438e6a80a6efa471b4b77458b3804d1094ad3a97b4861706927c460f7ce8da2b8e4045a97b4354be354ea91f277b
SSDEEP
768:bG3KxoqhbIe8OAoP290Mty+Pt4HiYucSFynhluvfzJn7:bG6SeRVP290ccHiYCEbuH9n
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f620f86af586edfe4fb5a39c6aee4fc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ