VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
05842cb7e463f205ba50ff8803b69ec4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
05842cb7e463f205ba50ff8803b69ec4_JaffaCakes118
Size
7KB
MD5
05842cb7e463f205ba50ff8803b69ec4
SHA1
f58494d237dd8f064f4cfd42355ceb317b2470b9
SHA256
9ef1a0e34cda0c87909fbff0b9527fecd4dfc9dfd9291f63800094f2b8a00f9e
SHA512
af110803ba2035646e7a58f2c762d527bef07cf5a9a8fdb4588b1bb1a3b2cf098836e7a65e37b637853faedb9aea731f7a2a79a3408fa788a4eac762c7e07c8f
SSDEEP
192:BK3VhSuBMc+7+8nJ2JCt8NnO5zpcv5Cv6gi+Q8A:BHl7+2wJYsuSxCSY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
05842cb7e463f205ba50ff8803b69ec4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ