InstallService
ServiceMain
VistaServiceMain
main
setup
Static task
static1
Behavioral task
behavioral1
Sample
aa935c697ddc8803c6c1b1e9eb9ef28c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
aa935c697ddc8803c6c1b1e9eb9ef28c_JaffaCakes118
Size
48KB
MD5
aa935c697ddc8803c6c1b1e9eb9ef28c
SHA1
53e991acd5894603c6713a6dd2b83cb0024a56d1
SHA256
31ec48c3c86b506e2d62881477730eb8790d33d843ebc0d0126686580abed347
SHA512
b5bd6d0eaa3b29a81fc73dd3c8c193667d6599c975afbf16f81e3e1fee7dd1fb55a752783428a46e5f0dc3f90b5bb4ad012ff2153a9f14b9d42eec260de7ada2
SSDEEP
1536:OwNBceyKSvI4OrWGE6kPCbvyyr6tKBa4Z:OwzANAKPC72tKf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
aa935c697ddc8803c6c1b1e9eb9ef28c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
ServiceMain
VistaServiceMain
main
setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE