GetNewInf
GetNewSock
Static task
static1
Behavioral task
behavioral1
Sample
6fbbed504f380e6e1e631da38e747678_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6fbbed504f380e6e1e631da38e747678_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
6fbbed504f380e6e1e631da38e747678_JaffaCakes118
Size
379KB
MD5
6fbbed504f380e6e1e631da38e747678
SHA1
6e86ceead246448df91a52e1ec86afb0dc83f19d
SHA256
2d8baff4ce69c820ead8c2a99f4dceeeab93c23b5a8bbac4d6fa0b498a80498b
SHA512
d78ed3f029756d21af8360282dc8ddff9759ee9fdfc7bdc0b0d85ef8455d7d474d7269b72034b81c02b35d882d4c0b20ab18d2b5acbd647a3b30bcd85729d559
SSDEEP
6144:4J8cxdb0XwzcwZ5W6IxolDKyxat3jIJzscagSTLbRHog6xYSWpLwC2A:4+udQXWcDfxolD/UlIXa5bjsYnLwCX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
6fbbed504f380e6e1e631da38e747678_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetNewInf
GetNewSock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE