GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop
Static task
static1
Behavioral task
behavioral1
Sample
74ef18a5c9100c1c6ec69d7789df72f1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74ef18a5c9100c1c6ec69d7789df72f1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
74ef18a5c9100c1c6ec69d7789df72f1_JaffaCakes118
Size
30KB
MD5
74ef18a5c9100c1c6ec69d7789df72f1
SHA1
a02d6c165072351ea9da1f1055c75095da96c703
SHA256
7b600a06ab4b0160aade8e80dd2fce2e58e1b9f3fa8ba0ae721a84f49cc55463
SHA512
165db3e04bc8922a28f3719d654b4ba86dadc1c47f9a92696a4214ad6e55ca3ee7bf768831fd492a86d08b75a067417540b5ee615095ce1a216a8ad7c86c446b
SSDEEP
768:fOm1tu/vcg2mTkWToGercFpefimn4dTX0NMp1uf:L/Ah2mT9ToGeoLeqweTIl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
74ef18a5c9100c1c6ec69d7789df72f1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE