InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
Behavioral task
behavioral1
Sample
844511f3da8595aacd37b75e23c253da_JaffaCakes118.dll
Resource
win7-20240708-en
Target
844511f3da8595aacd37b75e23c253da_JaffaCakes118
Size
5KB
MD5
844511f3da8595aacd37b75e23c253da
SHA1
e1025980f536bc375b6140fdf34bbf998b36698c
SHA256
a45103770a516819f85304b48f87803660496a4b55d57fb8569aecfa3ddaf40f
SHA512
f74a8b3b6db6f2be8fd7303702639ea905da8aee7fd7e7b5bd820aab7f27398acc5b84b424f558132665ef854031f024acbb8ce4fb7cbda2fe8541c242b4f3c5
SSDEEP
48:C1cxa7KZH82V3Uu5ro1S9Ss99RsiDAFqnbf5s0oJWrM1U/bC8qyzSeJY8JTaAPuY:ta7KZp9rSS91sH05GJU/bC8bDK0+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
844511f3da8595aacd37b75e23c253da_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ