InitObjects
UninitObjects
WriteCommand
Behavioral task
behavioral1
Sample
d2cec41e01862932789e900f86cd2b09_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d2cec41e01862932789e900f86cd2b09_JaffaCakes118
Size
5KB
MD5
d2cec41e01862932789e900f86cd2b09
SHA1
fa3a4359a32893a8135bfc0e17c89042d7b1ce39
SHA256
bfcdd320b011d89550f823d2543fbc3428440f088aa0a15d7928a3a521527b51
SHA512
7227f8578d680b65307ea1e70341a08fe8b8da86930676b694704db73b29808bf03bbbd985818f2886fa17bda0df8af683ea53b16d09908352c89a9047375eba
SSDEEP
96:westm6k3g5iFz0AEeraxwLSyY4pKnTyYu:iy3JFxaAYqQTY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d2cec41e01862932789e900f86cd2b09_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitObjects
UninitObjects
WriteCommand
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE