ApplyPatch
ApplyPatchSuspended
GetData
GetPluginAPI
OpenConfig
Behavioral task
behavioral1
Sample
6201aa3c1b0b21e806a5fe31135c3b98_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6201aa3c1b0b21e806a5fe31135c3b98_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6201aa3c1b0b21e806a5fe31135c3b98_JaffaCakes118
Size
127KB
MD5
6201aa3c1b0b21e806a5fe31135c3b98
SHA1
dbd8de98a73e3a8375a39101ac566b1985e4a310
SHA256
5ad1f3627bb567cf4b54b27f6da03eb41fcf306726626db2eb2a9035b58317e8
SHA512
b90fbcd64e84dd2364e578c8781f35a1b4d838ec0bfb236681a381dffecbdef40435712d956d99d0cd20081d20d552671a0a89652b577b9c53c2a75dca91cef2
SSDEEP
3072:PsmgrlO04PZJATsL7HGOn76RCDUtp5tFxRLZTK:xgrA04B+TjOn76Rl/nT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6201aa3c1b0b21e806a5fe31135c3b98_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ApplyPatch
ApplyPatchSuspended
GetData
GetPluginAPI
OpenConfig
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ