VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
6013c234553f685a57655d7699dfa310_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6013c234553f685a57655d7699dfa310_JaffaCakes118
Size
7KB
MD5
6013c234553f685a57655d7699dfa310
SHA1
06258d24bd8a0cb2ff8539df1896979b746318a3
SHA256
3fe83debbe303df783efc2d02dc7e3e88acdad7fed7d53571fa0b481912acdda
SHA512
dd961a7a3418af4c57088c7feff2085d8d8de3c1eb13b79a9858d03e5d0cca2ba8af135184d8b169d770ad9c336637921935297eb934ba2ad7698d049319fae6
SSDEEP
96:6nw3tEzdk69TXs6h7TpYRGly/T35ipSDudiCuK7uWMRtZFTLn5h+2aCWfJXP3S:n3kSWT86lpxqipSDUat3Ln5Y2dWfx3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6013c234553f685a57655d7699dfa310_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ