LoadXMLFile
ServiceInstall
ServiceUninstall
SvcAdminVersionStr
UninstallAllFDServices
Behavioral task
behavioral1
Sample
82f9ef163bb2dacfa7fde046f50b5019_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82f9ef163bb2dacfa7fde046f50b5019_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
82f9ef163bb2dacfa7fde046f50b5019_JaffaCakes118
Size
30KB
MD5
82f9ef163bb2dacfa7fde046f50b5019
SHA1
41390dbeb4684c23f8045ec6bdae265d95e69eef
SHA256
cc81566df64f58a91242185263bd5ba63a28301228925d9a9d64bb2cdb7bb1ae
SHA512
6854516a37baed6f910507de582a5757a78e4a78ed1f6f074cbd8dc3704b328b768be5bfb72759b95f261c72966cbead9bbb9c103a8a0e73ce7d35400f4e48ad
SSDEEP
768:m3Eh607IEaPh6osBMBDk6dlnRRUIDAtRuS:x60cBcosBh6DRRUIDIQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
82f9ef163bb2dacfa7fde046f50b5019_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadXMLFile
ServiceInstall
ServiceUninstall
SvcAdminVersionStr
UninstallAllFDServices
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ