DllRegisterServer
ServiceHandler
ServiceMain
Behavioral task
behavioral1
Sample
ebaa478176a6b26d21e2b4629610df4f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ebaa478176a6b26d21e2b4629610df4f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ebaa478176a6b26d21e2b4629610df4f_JaffaCakes118
Size
26KB
MD5
ebaa478176a6b26d21e2b4629610df4f
SHA1
f791c681ca7045087d1becab367b89e83ef17824
SHA256
924595db61b68372c0e2953517a9ee18e4440bfa6edf043632103176c8e8b12a
SHA512
61148ce3da864b20b73c6bcdcbf36d6e136df1518b1586600d427bfbc2a8300b7691396d6bb3d9df69af4a27887e2a951c8d976f1c6a3a21ebe948db497276f2
SSDEEP
384:Yp9pYbypSHPkbX5FystL+xjcXthXlcGrqQ1gv9tf/3qdOTclHe+bcgVd58ST+OTC:YWJB4KI91v2vMHbcmyf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ebaa478176a6b26d21e2b4629610df4f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ