MatchingUrl
Startup
Stop
UrlProcess
Static task
static1
Behavioral task
behavioral1
Sample
45729787dbb369d3b9ab250cd41b93f1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45729787dbb369d3b9ab250cd41b93f1_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
45729787dbb369d3b9ab250cd41b93f1_JaffaCakes118
Size
114KB
MD5
45729787dbb369d3b9ab250cd41b93f1
SHA1
8a8d62f2a352869a1abd972ae8330bf9cbccde6f
SHA256
1a4e4d556cd2cb600d57b2fa108e322cc92877de9f5f39e6e08cc49031e7b572
SHA512
dc97cb92aa911948bae427006a30edceb5986744b4951efd2666c38053615e351db59aa7fdbfe9a48f3a63eb067e64070026a8f8c10c7c33b0f2e173e28ad9fe
SSDEEP
1536:3Xs/93LhOsZ2lczdV9k+tnYMhPJpyufraKNP3QIYvK+4xK2OAL+BSRiu/GIkwYaO:3Xs/1NOI2Ke14DDPXKORRDewJ6r
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
45729787dbb369d3b9ab250cd41b93f1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MatchingUrl
Startup
Stop
UrlProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE