InstGetMsg
MyCallWndProc
Static task
static1
Behavioral task
behavioral1
Sample
34193192e614b57d0b3e9a777b6ce165_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34193192e614b57d0b3e9a777b6ce165_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
34193192e614b57d0b3e9a777b6ce165_JaffaCakes118
Size
14KB
MD5
34193192e614b57d0b3e9a777b6ce165
SHA1
c64efc29e0888468bdc510fb9b9b00f67dab5941
SHA256
059605a49f8a4799d60228edd72ffa7484ecdf712902a2285708c74b3e73bb3d
SHA512
6e836246aae482717dd12c736b445217e44e3e77267f2ceb3df8f25d3f445f4116e2f290247e8dda6d337d6a1e74ae321aa91c1f92eb11f41f1b702965bbec35
SSDEEP
384:wavRZ0ZmazQLK8E4D1R4uwpa/YWAPCWCi6:7vRZ0Bc240uwpOKt6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
34193192e614b57d0b3e9a777b6ce165_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstGetMsg
MyCallWndProc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE