GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Behavioral task
behavioral1
Sample
acdc73aa6277b772f4fc37d25b89d9d9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
acdc73aa6277b772f4fc37d25b89d9d9_JaffaCakes118
Size
15KB
MD5
acdc73aa6277b772f4fc37d25b89d9d9
SHA1
e0c6022d0c2edfa27fab5a66da1820d48c91626b
SHA256
429478ce8eddc0a03b64942e5c53a04057668db888d6b1bde02171500a74aca6
SHA512
f1e73acdbf5ff47380b82923cd70cfcadf6a5282c2af10966bd863a4e4d60a5964159e5912efee0023f2eccf2669bc7005c98914f67f9d195e30a1395a6fce1a
SSDEEP
384:NYZZjd0kgOTQwAtWO7Um+F3quaw1qJQ8PYsFaSl:2ZZjXgONKWdJ0dw14zwQaU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
acdc73aa6277b772f4fc37d25b89d9d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE