Always
ConfigCast
GetFIE
GetPlayerVersion
PrioritSetAd
PutAdSpecial
PutAdsware
SetAdrkOn
playAdh
Behavioral task
behavioral1
Sample
aafddac247de93e220abd62fbdc1f011_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aafddac247de93e220abd62fbdc1f011_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aafddac247de93e220abd62fbdc1f011_JaffaCakes118
Size
173KB
MD5
aafddac247de93e220abd62fbdc1f011
SHA1
522d70e29f3a99abd739985a6bd2dad76d4d41c8
SHA256
79ea87fb18a2ac22b8951344cac8dc080dd15513313af49fca27d73b5d5f8d5c
SHA512
b5d569a05172a50dc449b1c806cc216afe451f59f75f40d0f5b6addada237519194acd645c467963f67bc183fff02c0be89257019506c8468fd7c0f044b7df06
SSDEEP
3072:OfJzbfPZyR10s8UI/vNfAU/8/N2FRBYVsonCJQFy3NCTGCm2LsTrgrp1IRj:OfJzb5yRuZ/vNYMrFRMsoneQFaNCTBRc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aafddac247de93e220abd62fbdc1f011_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Always
ConfigCast
GetFIE
GetPlayerVersion
PrioritSetAd
PutAdSpecial
PutAdsware
SetAdrkOn
playAdh
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ