Go
Heart
M0ZHE
On
ServiceMain
main
Static task
static1
Behavioral task
behavioral1
Sample
aedd4025e6e67bb58538a0bab8583213_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aedd4025e6e67bb58538a0bab8583213_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aedd4025e6e67bb58538a0bab8583213_JaffaCakes118
Size
63KB
MD5
aedd4025e6e67bb58538a0bab8583213
SHA1
88ff9ec8549da326eb365dd35c50c68c9bfe98cd
SHA256
77db8bafb63f2fbeec967059b20e32a29266c58cb94542dcfff3323347250d58
SHA512
640cc27aeb45483d2df9766ee49a1aaee3b627c9cbcf815ce1f358268eb99b056b41c2e20400e5ab1f5f871e9f8c83e6b2b1877a6f3ab5f3868a046572a12f00
SSDEEP
1536:3027/jwqh2nFeINrdvnfXrkUUcMV8bTqf4bMnUXdgaXucV3mOf/Mi:33jjwc2FeIxRrktSbTRMnIdgaXHV3mOX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
aedd4025e6e67bb58538a0bab8583213_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Go
Heart
M0ZHE
On
ServiceMain
main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE