DoInite
DoUnInite
DoWork
RegisterCallback
SetWorkLoad
StopWork
Behavioral task
behavioral1
Sample
d73cdde545067b5dcfce4ba79a77bd8b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d73cdde545067b5dcfce4ba79a77bd8b_JaffaCakes118
Size
126KB
MD5
d73cdde545067b5dcfce4ba79a77bd8b
SHA1
b5b8c761aea2f2e5a981bdbf7d121e461e6e5445
SHA256
4553de55d79b81456ff3a864a17680b50ef956f71fa8f208b5f1cc40a31367f9
SHA512
3c8abdba932e3c2c41b03df323120c5ca3f2988907b8e82b5a74bdc3e5de2eaef1bc5bc6ace12cabb18ad8ddc0ecd75b6ca339104bbb7d23a1d31562cc7335ab
SSDEEP
3072:+whab4jaNOLisMDjVSAagkPXa/Wc6arC8GmByw2aN46vout:l3PLwSA0PXq56azGmBZ+6voS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d73cdde545067b5dcfce4ba79a77bd8b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoInite
DoUnInite
DoWork
RegisterCallback
SetWorkLoad
StopWork
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE