Rool
ServiceMain
risinga
whm
Static task
static1
Behavioral task
behavioral1
Sample
abca79c011fe529b0f040612ba66bf4b_JaffaCakes118.dll
Resource
win7-20240729-en
Target
abca79c011fe529b0f040612ba66bf4b_JaffaCakes118
Size
43KB
MD5
abca79c011fe529b0f040612ba66bf4b
SHA1
4a6bc6847aec88015cf191be883bf9d9df276ec1
SHA256
8170ad0bedccb01010866660b7e2f09b58b769e722e5ee7ad45823025a7cc1d3
SHA512
e576b9c7053d188726fa560f17ee4397ac9e73c0bfe3811a7efe099990935741a0a30e2a2d249bebe0d2a79cdf2344442d86b29316e82c20f049fb29c32d2978
SSDEEP
768:4+C0oVaI/8/Z5sz6x/2hWEnoGXQvhOIREjKpBf5z0gAhMCTN+SJUSP1:4/VV/gX/2hu5OIREcBfijyu+YUSP1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
abca79c011fe529b0f040612ba66bf4b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Rool
ServiceMain
risinga
whm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE