DLL_BUILD
DLL_CLEAN
DLL_DAT
DLL_DAT_EXCLUDE
DLL_ID
DLL_INIT
Static task
static1
Behavioral task
behavioral1
Sample
43dc9494a5ebabaa631d05c0d5eb0ff2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43dc9494a5ebabaa631d05c0d5eb0ff2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43dc9494a5ebabaa631d05c0d5eb0ff2_JaffaCakes118
Size
141KB
MD5
43dc9494a5ebabaa631d05c0d5eb0ff2
SHA1
f8be971f2a1621ae62a3ee75c57eb850ddacf281
SHA256
f506f7100e4cb779386ae2fafec6bde9f912d6797727d99df0bdc3115591ef96
SHA512
483de940f310ea1a20b5a264681f8dcfcc1cbbd1b53897538a664772e1690cf7e209f976e564a83e50f2b2bcbe625e1dcf5aceb386220e15505bf90a5c2fecf7
SSDEEP
3072:REj5fsVGYHt1djykoiyEJY/K0MkzYrxx1PTenku:RFVGoykoiT4K0Irv5Ck
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
43dc9494a5ebabaa631d05c0d5eb0ff2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DLL_BUILD
DLL_CLEAN
DLL_DAT
DLL_DAT_EXCLUDE
DLL_ID
DLL_INIT
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE