DllRegisterServer
ServiceHandler
ServiceMain
Behavioral task
behavioral1
Sample
d989d27652cdbbca4bffd9563c5508c3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d989d27652cdbbca4bffd9563c5508c3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d989d27652cdbbca4bffd9563c5508c3_JaffaCakes118
Size
26KB
MD5
d989d27652cdbbca4bffd9563c5508c3
SHA1
fdccf7af2ebcfa3059b3e1d4c043c53be6291b13
SHA256
fc84456c156e34b0488604993461286a884041fe6f7e6ae8e5f841a1725cada4
SHA512
0e5107ff5304ae768c1202c3782e960ff17d6d7e5721a49f06eeabe2159c97b10d5b1563387ad24fe0eead3dc9cfa89f3eea401e8e04f07e617bd8bba4e5ebb7
SSDEEP
768:+17kJFsUKLrwdCJTxXrVGsDhfuqMkvqb1y:67SFJEJdbVpDhfumqR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d989d27652cdbbca4bffd9563c5508c3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ