AVPGetDataFromPages
AVPGetDefaultPolicy
AVPGetHelpInfo
AVPGetPageCount
AVPPageCreate
AVPPageDelete
AVPSetDataToPages
Static task
static1
Behavioral task
behavioral1
Sample
303ba89592b7419cbb9d42d584c78289_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
303ba89592b7419cbb9d42d584c78289_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
303ba89592b7419cbb9d42d584c78289_JaffaCakes118
Size
34KB
MD5
303ba89592b7419cbb9d42d584c78289
SHA1
0d9be24dd3afcf648bed6eefee6de5fcbb353529
SHA256
a4de92c084ea7441afa993703a439b62f96e5aba57fd57d7d98229c7b16b1f11
SHA512
0ac291bad8dd62ad82e222e6e9f6299d5a265aede86753bd5ef02942817996cd7cdd44cb27f787cffb8ad5a7902aadfadfbac44966c33dddf23bab0c0b0083c1
SSDEEP
768:eJ8MqLIctDiL3nI7OA1n2twZoDaUMQX075H6ub6CMkQF:eJmLIcZU3nTmZMaUMEe/LQF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
303ba89592b7419cbb9d42d584c78289_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AVPGetDataFromPages
AVPGetDefaultPolicy
AVPGetHelpInfo
AVPGetPageCount
AVPPageCreate
AVPPageDelete
AVPSetDataToPages
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE