DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
84001498ca08afb6938c8dcae66049db_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
84001498ca08afb6938c8dcae66049db_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
84001498ca08afb6938c8dcae66049db_JaffaCakes118
Size
325KB
MD5
84001498ca08afb6938c8dcae66049db
SHA1
afceadd017efc7aa5f9515b61ddb00b8c8b8c2b2
SHA256
c2b8ead698a58e95cfc55119a5f92fe27ad70e7318d02941fc2e9ac8e51f490e
SHA512
2a02e95559b4f830da4dc7559105ff500e627f894d337ce3b418b18275ef17fea69f0ba571645a4df6fa0fe337b9981b9cc1baae243009567c5779696b609b7f
SSDEEP
6144:tDpyLyP7QGTSGK1KRaLXdaosoIvP73OgNkpCvKQtf0iGJceA3fHLtBD5:tNyeP7oGw68aosX3Cg+psciGJceAPHLn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84001498ca08afb6938c8dcae66049db_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ