GetOption
HashBuffer
HashFile
HashString
Information
NewBuffers
SetBufferByte
SetBufferLength
SetOption
SetStringBuffer
Static task
static1
Behavioral task
behavioral1
Sample
d17f446171e8d1045b405ad1de0ae22e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d17f446171e8d1045b405ad1de0ae22e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d17f446171e8d1045b405ad1de0ae22e_JaffaCakes118
Size
19KB
MD5
d17f446171e8d1045b405ad1de0ae22e
SHA1
366f1c0d105b13b4bc23edc65157331cfd117bd8
SHA256
1d0f5e9ce06094e120fc91c9f940042b71a59ebee0afa8f9e25b436e77bdcdb0
SHA512
00d49cafd6c9f9eb61e1cc7ed27d3f830c50ba4cb5d7d6c2a3fa8cd41005ff4261ede2bf175d99fc869e83ecd7f408e722c2f0c2f0e651e2e5355321247697d9
SSDEEP
384:hp1Qea7Iz7sxw0WAoB3gkzz+EnB7VdnSwTLL/LTyfLURpw8v:hC7Izw5svz+EnHdSw334G
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
d17f446171e8d1045b405ad1de0ae22e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetOption
HashBuffer
HashFile
HashString
Information
NewBuffers
SetBufferByte
SetBufferLength
SetOption
SetStringBuffer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE