SetHKType
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
a4c2305188dc9aaa0f33db3c9ea6d4ee_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a4c2305188dc9aaa0f33db3c9ea6d4ee_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a4c2305188dc9aaa0f33db3c9ea6d4ee_JaffaCakes118
Size
16KB
MD5
a4c2305188dc9aaa0f33db3c9ea6d4ee
SHA1
d95f0846f13c5cce53c79e02e116ea09292b22cc
SHA256
598e628ef271b74b79fe6a991219f9deb0389dd790d4b4456eb06a4ef1367f5a
SHA512
839371ee1f47373c2769963cba7886a22ea9cefbaf0aa6a916981fed169f72f1528d0fa028baffe8f161e6adccbc00783c672e779bc3f53cc760ec6258304e11
SSDEEP
384:1LQBdr3vJiHDRK3hYrkMYbaedS4e9lvpLqEvbW/c:23LvJQRgRMwHS4e9zJvbT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
a4c2305188dc9aaa0f33db3c9ea6d4ee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetHKType
StartHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE