DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
Behavioral task
behavioral1
Sample
48f83f82a988d81c084668b33e6bb548_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48f83f82a988d81c084668b33e6bb548_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48f83f82a988d81c084668b33e6bb548_JaffaCakes118
Size
77KB
MD5
48f83f82a988d81c084668b33e6bb548
SHA1
f6219a8ab3b88b1f8962b630651a59d26e3177e4
SHA256
b52dbf6ed155f040557d735ba119f1a148f0e3f48a89d6b66c55eee935fff776
SHA512
77881910acf46b3e9ef5d6cbe2db3b669d4fba464f990887e9e84577de93c9661663445b784c1694db5d377679fcc6b6fc9ba16b38f58b3aefa38d673c850be1
SSDEEP
1536:/tizqrFvAS5xFzAOLTivgvPw705RssYJbNLzvNfNMljEfYoZ3f:1iOrBlxFMqMgnw7cIbNH1fNMWYO3f
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
48f83f82a988d81c084668b33e6bb548_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ