VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
6aeb47e1719de9e00419ea05686338af_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6aeb47e1719de9e00419ea05686338af_JaffaCakes118
Size
7KB
MD5
6aeb47e1719de9e00419ea05686338af
SHA1
8bf3664d2bfb71aa592ef7dad026940ffbb6e8ba
SHA256
d96a4895f4e147c3c80b92177221c313e9f320c0eb120c15aeef2e3b145c47fa
SHA512
6329499e3dd6099f8cfa861fb8fe49c7fef07ca833c82a56e81fe05a2a7fd6d4d7ef4d97c3e42d83e5bda125f4272378d2c06b59d7ac009e3c3dd94e4e04fdf7
SSDEEP
192:cGc6rUCGN7fOlNjmYp6qfo4gVXicpruvrX:pUPLOlNiYpFeycN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6aeb47e1719de9e00419ea05686338af_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ