DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
Static task
static1
Behavioral task
behavioral1
Sample
81c89937c53445667f4ed487a5594b50_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81c89937c53445667f4ed487a5594b50_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
81c89937c53445667f4ed487a5594b50_JaffaCakes118
Size
83KB
MD5
81c89937c53445667f4ed487a5594b50
SHA1
da20c69996a262b4cff7f8168876baaae3917ccd
SHA256
9fbbbb6b2c65eb18565b93166c0ea09351b604f0fa6e9de6b86cce9c18c33098
SHA512
f266900aa9ff02d097bbebed84b6edb3249cfb8d230cc9af85632716889c69788ef739285f36a963dcb388f2ed1b5fb2cc5e544ef4727dc0fcd828475f90b696
SSDEEP
1536:sZwl2aUN1+G3gwpi41FQtv6fQzk2i33mLbqBNpNEK3pOP28ZjnxQXFt6qOeg9cuk:stJ/QwpxFavqQz7s2S8ZP2KnIFt6qtLR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
81c89937c53445667f4ed487a5594b50_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE