DllRegisterServer
ServiceMain
Behavioral task
behavioral1
Sample
144642329bdf259544dc1fb8c4da727e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
144642329bdf259544dc1fb8c4da727e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
144642329bdf259544dc1fb8c4da727e_JaffaCakes118
Size
328KB
MD5
144642329bdf259544dc1fb8c4da727e
SHA1
f83dc9b8aa3afd261d05771322c49b6e2ae2fe6a
SHA256
02d78c15fcd9e8ec5b4b14944e8dfce34c74ca25c8b5b0db830fd3883707f435
SHA512
d9a628865f2f6dc62e346d18028843d8cd58ae079e23bbcfc83542d914f555b0506ca1341470b9bb5990f1f1a318cb12cb19252a22bdfc89da063c5b5c3d67c6
SSDEEP
6144:ne1l5ZhVqxdjQ7mFg+NyjH2JawBWVqWbX9MP3TXptjeWIOhoo151qH:gXZQffCHGvBqbNMPfjdOOqH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
144642329bdf259544dc1fb8c4da727e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ