StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
46f32618ec037eddc93c211c2667b80e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46f32618ec037eddc93c211c2667b80e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46f32618ec037eddc93c211c2667b80e_JaffaCakes118
Size
131KB
MD5
46f32618ec037eddc93c211c2667b80e
SHA1
53708be6a6a2796e7f93e268435072338ca8698e
SHA256
e15dd92035487b20ecf393eebc20cb50583df02890ecc200791fc94c4de77f38
SHA512
4c27d261bee682be67913e521a9ffa2133cfa107e94e31150a499859d7ee7a35a3e3d2093216a6b1734228c577a332823adb4e0d4d54ee5f8a721bd1fe6d0c75
SSDEEP
3072:DZW828VY4GgNpx6CfwUiYZ8tmYtxJSov8t9/5W:U8pZGgNXpfwUlZ88YPvi/5W
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
46f32618ec037eddc93c211c2667b80e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
MessageBoxA
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE