ResetSSDT
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
f3c6c6e5b5a3312d13d8f16a894b474a_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f3c6c6e5b5a3312d13d8f16a894b474a_JaffaCakes118
Size
57KB
MD5
f3c6c6e5b5a3312d13d8f16a894b474a
SHA1
942a009209059ba0f0c8970d9539fdfaf26e912d
SHA256
24743d8ec5fa6df017d833b9f3bfdef8f1aa238532dcd2e90e424dc71c4dc8a9
SHA512
0caa26aad41cc965a79b32f8697ae0f5ea6c2a9e4678e9a29937605faaa4e6cb6d9a0dd246206bae16e389a35ce498cab4ecd15057659042f48edf671b8bddd2
SSDEEP
1536:PFLQw+rn7TZOdzcbHNO8GSno1dvyia1i7atcAgp:PFYnjbuSo1pyTiGSpp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
f3c6c6e5b5a3312d13d8f16a894b474a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ResetSSDT
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE