MainWorkDo ServiceDo
ServiceDo
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
30a296697717ec2492c96dce5e8186a7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30a296697717ec2492c96dce5e8186a7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
30a296697717ec2492c96dce5e8186a7_JaffaCakes118
Size
47KB
MD5
30a296697717ec2492c96dce5e8186a7
SHA1
76dc4b9822d9bce665e6edabdaf2a701e1f48341
SHA256
d3d7753c4d3c8837e063803f7485542e46d5f595fd460ca87b1c7a44267f61bb
SHA512
7baf51aaa9af29831a29499da0485d1ef8287163f5b63caecf3496f75dd01eb65221bfe3ae5c031d37bc6c499c354baca458062d9475a37439bfb4bceee7bff9
SSDEEP
768:KSuBF6CEG5yvgSKWUur1wSMsS7dVQlv+lDfD8oIdcotJxjqXRWQlhjDFgZ9otY4:coRiyvgyUM2QS7d0v+Z8xcmJuoQlEotl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
30a296697717ec2492c96dce5e8186a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MainWorkDo ServiceDo
ServiceDo
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE