DllEntryPoint
DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo
Static task
static1
Behavioral task
behavioral1
Sample
33cef245ba950e72c77c8f090da5948f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33cef245ba950e72c77c8f090da5948f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33cef245ba950e72c77c8f090da5948f_JaffaCakes118
Size
15KB
MD5
33cef245ba950e72c77c8f090da5948f
SHA1
1308996dd0571cbc5ddb37eb022e0f5e976257e5
SHA256
0a69463dfddef3ac1ccc5b2d186a89ebf7e154ce6887dfd3f816c7386d73feec
SHA512
3ee9f3951b1d5bf03b0c066d0dcad0bc580860f233c35c3216eded709ddc6e34caabf2dee9edcc84700bfc883d5bb9945174fc2ccdf4054a1996405d969bb3d3
SSDEEP
384:dWDv72dsVE6Ls5KDlDYBDinw6iyYwyzRv9bIp0o/NXOzf1RXJrMkb:4DviAB8MDYgOv3UF1XOLbXJ5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
33cef245ba950e72c77c8f090da5948f_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllEntryPoint
DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE