DllRegisterServer
ServiceHandler
ServiceMain
Behavioral task
behavioral1
Sample
da6ad37e644d0dd52b20458a9274d260_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da6ad37e644d0dd52b20458a9274d260_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
da6ad37e644d0dd52b20458a9274d260_JaffaCakes118
Size
26KB
MD5
da6ad37e644d0dd52b20458a9274d260
SHA1
b0cc83ceec3f91a5eb196a3e5dfdd046d6bf8747
SHA256
16974853d0baa9222c32e3b1c51a047de6c5f1782f9daf8ab3051918e38d9fe9
SHA512
13413f63aec886a932e7f2bd07031ca9e1dd2707b2be4177c8385411ff910e1c2185ad6d2370494dce33862fd60e54678128e4bd501802cdeeede3b831e06dd8
SSDEEP
384:3H8L6fAxJ++b7SNRbcIOjhnS8z1pSUlVkBVwNSW89FPIGOwIHDyk7ziJNp70:jco+b7s9cIO91sUlVkMUjsGO732Npo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da6ad37e644d0dd52b20458a9274d260_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ