WanPacketCloseAdapter
WanPacketGetReadEvent
WanPacketGetStats
WanPacketOpenAdapter
WanPacketReceivePacket
WanPacketSetBpfFilter
WanPacketSetBufferSize
WanPacketSetMinToCopy
WanPacketSetMode
WanPacketSetReadTimeout
WanPacketTestAdapter
Static task
static1
Behavioral task
behavioral1
Sample
f6b7778df5be146ac984cd84cffaa136_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6b7778df5be146ac984cd84cffaa136_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f6b7778df5be146ac984cd84cffaa136_JaffaCakes118
Size
24KB
MD5
f6b7778df5be146ac984cd84cffaa136
SHA1
720c2ea98a49b325890427ce37a0f2977b2eabed
SHA256
be9cda928837aa2400774830a64b26f0d5411c64934fa90a50dc05ed49460ced
SHA512
b71e24642e3b74a514f51fb54942a98d3ce2523ff65998e10678ea732f003a9ae737317da30305e5f16b2c476d2779afa4a46d7bc01eab609b1eec91bc448d37
SSDEEP
384:IDdtCfrn4ljJnLjH1VthGw2WWFtiZazLSxW9KqDWdYC11Yn434X:A4TnItVB/W4YxiqC11q0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
f6b7778df5be146ac984cd84cffaa136_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WanPacketCloseAdapter
WanPacketGetReadEvent
WanPacketGetStats
WanPacketOpenAdapter
WanPacketReceivePacket
WanPacketSetBpfFilter
WanPacketSetBufferSize
WanPacketSetMinToCopy
WanPacketSetMode
WanPacketSetReadTimeout
WanPacketTestAdapter
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE