Install
Launch
ServiceMain
UnInstall
Static task
static1
Behavioral task
behavioral1
Sample
81c84b2c57a4d5631e0a876f1b8a736b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
81c84b2c57a4d5631e0a876f1b8a736b_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
81c84b2c57a4d5631e0a876f1b8a736b_JaffaCakes118
Size
245KB
MD5
81c84b2c57a4d5631e0a876f1b8a736b
SHA1
dc31105d96b9f7146a23aa040c6e4ad63f4ef16f
SHA256
72aa646a5043b6febe2d7c615e9f42e467e33308d14070dbd5158921b8cb2868
SHA512
e35ff70f87b1dd1d3c1f8d80b0977a1f5b06b7b6a50e80d22f7a219ea44c9a9b5a3921053442d46ade02dad334a5ff093d7735f18dad8a4495daa2c8daafd586
SSDEEP
6144:dUtGQe1uvG9SnNOaF2iHuQLudYaID292oHxcsx7:dGfCu+9OOu77udYhM2oH+E7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
81c84b2c57a4d5631e0a876f1b8a736b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE