DMCtrl_Uninstall
DMLaunchManager
DMRun
DM_Exit
DM_Fire
DM_Start
Static task
static1
Behavioral task
behavioral1
Sample
96db10fd00e1beeb7ddabb4ea8c48940_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
96db10fd00e1beeb7ddabb4ea8c48940_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
96db10fd00e1beeb7ddabb4ea8c48940_JaffaCakes118
Size
224KB
MD5
96db10fd00e1beeb7ddabb4ea8c48940
SHA1
02a2e285d903a82fccf72a369e54676e2a0c660c
SHA256
930fe859ccf090443064c0563e6b13e2ddd45b4ef0d82ba2b7a70c05d0297e1b
SHA512
ad380395aa66b1f00ab7a273b2b6e7f45d0bfee14cb116d970cba088bedaecf73a172f71913b8dc816798ff62e5719e399509e85e140b1371bbad5dc22dac2be
SSDEEP
6144:C525aFqzVeFZMAeaThNV2ODK8o+zUaD08n:CE/V0MmjVbDt1D08n
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
96db10fd00e1beeb7ddabb4ea8c48940_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DMCtrl_Uninstall
DMLaunchManager
DMRun
DM_Exit
DM_Fire
DM_Start
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE