??0CSockdll@@QAE@XZ
??4CSockdll@@QAEAAV0@ABV0@@Z
?fnSockdll@@YAHXZ
?nSockdll@@3HA
start
Behavioral task
behavioral1
Sample
2f2155bfb0d4a3b33b7b4d706f6d940a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2f2155bfb0d4a3b33b7b4d706f6d940a_JaffaCakes118
Size
7KB
MD5
2f2155bfb0d4a3b33b7b4d706f6d940a
SHA1
b5da5d0ddb0d89f48bbc0896b61e5447c051cd71
SHA256
0a3a43250d1791a09e70a9ed941b63ea6faeeb3499b0266641c6a17d4021263c
SHA512
6fc3b80c6c2a47c7354d332b4963f8772945fdcbc9775ad9a8b43c6be50bfaa8dbbcc0b8276cb1b090ecd67b084134c1dc78e8e657053b759e8eccd3b44f6b95
SSDEEP
96:aCVi8Ycywcqbej4LJzJY+EqOO3NXx15yJp1AJQXb3XXcsOuxA9I8XPv:9/YcySbCwzJhdOK8Jp10oGI8X
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f2155bfb0d4a3b33b7b4d706f6d940a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??0CSockdll@@QAE@XZ
??4CSockdll@@QAEAAV0@ABV0@@Z
?fnSockdll@@YAHXZ
?nSockdll@@3HA
start
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE