InstallF
InstallFND
Static task
static1
Behavioral task
behavioral1
Sample
a24f4d7e423e44c3058c4cc3b7fc824b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a24f4d7e423e44c3058c4cc3b7fc824b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a24f4d7e423e44c3058c4cc3b7fc824b_JaffaCakes118
Size
5KB
MD5
a24f4d7e423e44c3058c4cc3b7fc824b
SHA1
c4bb9b39504561c015d6f791de32c1898ca6c6c0
SHA256
7206af0f8c5159ceed48089f3b699096d79e0bab6d23037b23fa165bce16ad48
SHA512
6d952448f56390d4cf132e15d5cce9948b79ba9e4ba2e18056c7e6e6d79a235245c171f6bdf5155ef402bb9dda87cfcd4dec798cfe848319510ac6cabb1556a6
SSDEEP
96:57O2PMs8baXLl9z1tND7gxSq+emWCAwk8P:82PMszfzXV7+AuCAAP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
a24f4d7e423e44c3058c4cc3b7fc824b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallF
InstallFND
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE