?DelHook@@YGHXZ
?SetHook@@YGHXZ
Behavioral task
behavioral1
Sample
ef94c3ca1c4c7ffe7de4602a54852480_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ef94c3ca1c4c7ffe7de4602a54852480_JaffaCakes118
Size
9KB
MD5
ef94c3ca1c4c7ffe7de4602a54852480
SHA1
86f757f9539fc71fc54439a346e01a3aa41ec0d8
SHA256
3aef73869290e1102dcb196f5fd6bf53a3928d6ea1ef14f7eba2ddacda012c34
SHA512
193b9062a11b9b476a53c12af6c05a51cb7a0cb06dd788ae0c0d813e892dd0d81e6a6607de5aaf0e35bded449358fd8f6d10b72304ed9789d8b991d16de0af85
SSDEEP
192:WZespk2QQi1uadx7iEBJ9WiaC+PkTpWJf1Li:Pjt1cMXWr8TpWl1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ef94c3ca1c4c7ffe7de4602a54852480_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?DelHook@@YGHXZ
?SetHook@@YGHXZ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE