CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
i
Behavioral task
behavioral1
Sample
42275a22d95cf80ed341aa4d1b30f4bd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42275a22d95cf80ed341aa4d1b30f4bd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
42275a22d95cf80ed341aa4d1b30f4bd_JaffaCakes118
Size
14KB
MD5
42275a22d95cf80ed341aa4d1b30f4bd
SHA1
c87ba346f3e40effe8580482aeeb4ed8ebd46c5d
SHA256
9ab388cf9ae4bd24c22ee810eb228666e62fa0b7c4e42752c6652218467f0f0c
SHA512
44462ad7df78ab2185a37340b25ef9fa724ddb99e8677662dafd105a89a06649e14cc57cdf39e3991d67529afd3116ac85d8322cbe6d9b4a3f9a1c12705d704a
SSDEEP
384:CNdHUS6XIFsgG76imQSw3cN3xfL0kBmmbHxGWHIlaSQDH:9IFsgGHPsBFxGWolID
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
42275a22d95cf80ed341aa4d1b30f4bd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
i
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ