On_Channel_Change
On_Exit
On_Filter_Close
On_Hot_Key
On_Menu_Select
On_Osd_Key
On_Rec_Play
On_Send_Dll_ID_Name
On_Start
Static task
static1
Behavioral task
behavioral1
Sample
84ffa8e0f36aea7650afad56aa767ffb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84ffa8e0f36aea7650afad56aa767ffb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
84ffa8e0f36aea7650afad56aa767ffb_JaffaCakes118
Size
309KB
MD5
84ffa8e0f36aea7650afad56aa767ffb
SHA1
d87896f680f483ca3b73694934389d6f5f7e2a6f
SHA256
18ca215324f1a50552a63b2ebf7b1bd1d80aee15e3f842483d45189cdc8d1977
SHA512
6e40e8662838a7e6e27f46990526eb796547440ea618aa7456fc60dcba3610308c9e4c89fb595c4ca5e1367f06fb89e5efde48676277d380c9bbee8096c4641e
SSDEEP
6144:3BrfKr2RU6Ep+4cf9Xdh2fehVnBDbPdRY+41awJljI3eJnFl:3ZKr2RU6V9T26VnBfY+OagIu9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
84ffa8e0f36aea7650afad56aa767ffb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
On_Channel_Change
On_Exit
On_Filter_Close
On_Hot_Key
On_Menu_Select
On_Osd_Key
On_Rec_Play
On_Send_Dll_ID_Name
On_Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE