GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop
Static task
static1
Behavioral task
behavioral1
Sample
2c209216b1f412b68d85b3fe667af34a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c209216b1f412b68d85b3fe667af34a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2c209216b1f412b68d85b3fe667af34a_JaffaCakes118
Size
31KB
MD5
2c209216b1f412b68d85b3fe667af34a
SHA1
52836b4a8cc76c1e8c6836d9ddeb1ef099d23347
SHA256
e2bbba67f8fa04d341178a75f09c0e3a8aaaab1bdae3680be16875e4733882e2
SHA512
70e7ef87a7dfcff9ecdb4e645d57c3276f3b607b5579963b64633113ddfaf9068600b46c63455735b12159c8cd5a1a685e647b8743f52456e70426cc62c2d2c7
SSDEEP
768:jWapkj15qMcF7rTdlWwgtZIMNOxRLIwrpi0XdTaNYJu1vAA:yapkj10McNfWHeMNaLIw9i0NEr1vAA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
2c209216b1f412b68d85b3fe667af34a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE