_DllMain@12
_pgxKH_Hook@12
_pgxSetHook@12
_pgxUnsetHook@0
_pgxVersion@0
Static task
static1
Behavioral task
behavioral1
Sample
ea95327c9b354229c7005f3fdfa3fef6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea95327c9b354229c7005f3fdfa3fef6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ea95327c9b354229c7005f3fdfa3fef6_JaffaCakes118
Size
3KB
MD5
ea95327c9b354229c7005f3fdfa3fef6
SHA1
dafe470cfc3b3019e62f2e5cdd15653131342f8a
SHA256
53e18435721e05afeba75f193a39e9b2f441ffbbd3f6f9391e981fe06f6e0791
SHA512
cc4f0e86d2bf91429396bd406a45c1360024b0d7d76de30d73e694d4ff53c2d6c25bc7e6b5426e4d971c9d0e1514c11250eb8041dd38699dcc7783c9474f3fa3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
ea95327c9b354229c7005f3fdfa3fef6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_DllMain@12
_pgxKH_Hook@12
_pgxSetHook@12
_pgxUnsetHook@0
_pgxVersion@0
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE