VerifyClass
VerifyClassname
VerifyFixClassname
VerifyFormat
Static task
static1
Behavioral task
behavioral1
Sample
73f4ccd5a12ca91d5590c8f804cfdb9d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73f4ccd5a12ca91d5590c8f804cfdb9d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
73f4ccd5a12ca91d5590c8f804cfdb9d_JaffaCakes118
Size
23KB
MD5
73f4ccd5a12ca91d5590c8f804cfdb9d
SHA1
daa283519b7ac84b711cbdc48e65005e0114acdb
SHA256
d8f1be8394cbd1ddb9d0c2a857bf45ccb764df133d8d67f8469d91c1ffcbf30f
SHA512
30b0f2e4fc013dfb2fe8cc7252be99364e4ddb6df0b0ab1d7de9d12054e4bbe5342c80abca6981a9d4ff0963bad1323f7617d716e98f51e1cc175dedc30c406b
SSDEEP
384:qGFkr3ISPOyszNSCYDe1+7vKT06gBkH7jmtLceWUknOoK3X0VZpb:pw3M8Cy7vLBgOtWoN3X0h
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
73f4ccd5a12ca91d5590c8f804cfdb9d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerifyClass
VerifyClassname
VerifyFixClassname
VerifyFormat
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE