DllMain
xInstall
xUninstall
Static task
static1
Behavioral task
behavioral1
Sample
d6029abf364381b002618509b3dc71e7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6029abf364381b002618509b3dc71e7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d6029abf364381b002618509b3dc71e7_JaffaCakes118
Size
18KB
MD5
d6029abf364381b002618509b3dc71e7
SHA1
c82b3376d6e7ecfab6fc568e4dcece40e8b72757
SHA256
0007324c144fcfdde128ec4ed8afcc903e7a2b12129d6ec7e128a3468fef1c60
SHA512
f8963c7f2f79caef9bdc89c4ae081f0eb191249df3cf55907ded8a2006d91b7fd75b988933f0f4d2420ac3afa92eec35676f29b38c2ce0a1f07dfbfb7d145c64
SSDEEP
384:hillFlW+k5hFv02W+dM3a8yPo5aMFbnBalz:hilYJ/FPW+dZAgYby
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
d6029abf364381b002618509b3dc71e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllMain
xInstall
xUninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE