GetNewInf
GetNewSock
Static task
static1
Behavioral task
behavioral1
Sample
46209dec2f97d20173202424f49093c6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46209dec2f97d20173202424f49093c6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46209dec2f97d20173202424f49093c6_JaffaCakes118
Size
437KB
MD5
46209dec2f97d20173202424f49093c6
SHA1
5f5fd424f62e2196837859b0e28f918f943f4a7f
SHA256
42c168708075620796af7add060a1e35087035d5486f26fcaa1fe5f81fe7312c
SHA512
00dcb7afcfc8b152bde0873f40fe8a0153aa4de861d1930afda98e3c113de216ccb1c9fd6d1fa7ffffa7231c4ffe388953ead5be470abf483b7519e5787a3249
SSDEEP
12288:TNCvz9E8q19Dlh7QzmE7KwUp3OncHk2VsEGBGrD:5CSN1J7PWNUp3OncHk2PdrD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
46209dec2f97d20173202424f49093c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetNewInf
GetNewSock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE