DllRegisterServer
ServiceHandler
ServiceMain
Behavioral task
behavioral1
Sample
da20e987a200f9e94112d989caff5f3d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da20e987a200f9e94112d989caff5f3d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
da20e987a200f9e94112d989caff5f3d_JaffaCakes118
Size
22KB
MD5
da20e987a200f9e94112d989caff5f3d
SHA1
0867d3f794d4f6d139590460628a3f7a20ff1b84
SHA256
ddfb7ace775d7851531ee57d63efe1fab85b574e1d46d86932a3aa080a639399
SHA512
47a5de5415016a369178e3c72acb99bb5f03ac321f2ac461cf759ae9bbd0e2395ea4b80c736025fa3eb616236fc4d2125d2bdad739be25109510091644f32a7b
SSDEEP
384:AF06DEvaF7Oazr204JGv49wqc+0EUKc0mUXW1/4XdIKL9nn0k1jN72x:A06IvJUr2046ZqkEUKc0mUQWdxn0k15q
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da20e987a200f9e94112d989caff5f3d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ