Description
FreeBuffer
GetParams
Reset
RestoreBuffer
SetParams
Shutdown
Startup
TransformBuffer
Static task
static1
Behavioral task
behavioral1
Sample
aba6a94231aaaabe4575a3b585dc49bb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aba6a94231aaaabe4575a3b585dc49bb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aba6a94231aaaabe4575a3b585dc49bb_JaffaCakes118
Size
13KB
MD5
aba6a94231aaaabe4575a3b585dc49bb
SHA1
7a99c08306b2dcac624270d2291f956a4c6a1cf7
SHA256
47e75ac5cad44bcd460aa8babf1af8471865122f56020013557e08e7ea8cf6fb
SHA512
6dfbc36270b6aed20411508598de781daf7af214203f0bff3819eb2b4035761c53a7d5000320f9ad4170b97f5b75264b9eecb3911bdcccf4f1242ee6fa96aa6a
SSDEEP
192:LBjkBcRSdM3qwX0Xzz7/1s+9bYCohY07XSj1kNxIvQaOTLle1g/vELWZG9zpQ20h:dYB7dXbeN1PS1cIvQaYLEvLoG9zMjn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
aba6a94231aaaabe4575a3b585dc49bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Description
FreeBuffer
GetParams
Reset
RestoreBuffer
SetParams
Shutdown
Startup
TransformBuffer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE