GetName
GetState
PutData
ShowForm
Behavioral task
behavioral1
Sample
aef330eeb6aae5e014b6738be9a980db_JaffaCakes118.dll
Resource
win7-20240705-en
Target
aef330eeb6aae5e014b6738be9a980db_JaffaCakes118
Size
173KB
MD5
aef330eeb6aae5e014b6738be9a980db
SHA1
b4b74bccec5dfdd6644fb7b3ef6c0832cecc5704
SHA256
9148a4f3e6f73e04ca3c7d54be2b45c90de8a6a7aa6d591eaeaa57a3890bfafe
SHA512
ac0a0f52beab4569f8bb5c0f24ea41b89157ac22bbb11fb93fffb1711fefe4a40281a8d01e4c8f061f69695191f8c81624e10edbbe2f5bd04bb9615027b77452
SSDEEP
3072:xBUZLTP2jpGSJIqM5Cn2j7c2aduyZPlZ90stbwyPW2HZAlFvuF64TAig2qiyM709:zUUrxn2j7cfPfWqVHEFuzzx770EM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aef330eeb6aae5e014b6738be9a980db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetName
GetState
PutData
ShowForm
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE