FuckESETNOD32
FuckGIRLS
FuckJM
FuckJS
FuckKV360
FuckKaspersky
FuckKillVirus
FuckPLMM
FuckRiSing
ResetChangedSSDT
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
230a0edb0e57c30eaea88615be110b6c_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
230a0edb0e57c30eaea88615be110b6c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
230a0edb0e57c30eaea88615be110b6c_JaffaCakes118
Size
46KB
MD5
230a0edb0e57c30eaea88615be110b6c
SHA1
0761afcc2d458d39dba518599927c3396d0ed698
SHA256
0ec697ccc93e9e4dda391ece45b601a5471f90fe21ecad12b63cfe78497e2aaf
SHA512
58fb2fe74d65856c1fb8e071f9e633dc2a73ddcf16d0c5d7ac6b8bb026cd72a65462fed968fc081f061888f657523a964be50879e6c313cab516d3d9ade65ebb
SSDEEP
768:LfT33x3Evss9zVXcpZzPsygG5F/RmIgfM48cde2QWWZRB:LfT3x3EvpRVXwZzkDa5ufMfcsPRB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
230a0edb0e57c30eaea88615be110b6c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FuckESETNOD32
FuckGIRLS
FuckJM
FuckJS
FuckKV360
FuckKaspersky
FuckKillVirus
FuckPLMM
FuckRiSing
ResetChangedSSDT
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE