Install
Launch
ServiceMain
UnInstall
Static task
static1
Behavioral task
behavioral1
Sample
bc05e27246d1f12ce730a5402fd94d1b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc05e27246d1f12ce730a5402fd94d1b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bc05e27246d1f12ce730a5402fd94d1b_JaffaCakes118
Size
1.4MB
MD5
bc05e27246d1f12ce730a5402fd94d1b
SHA1
013eb3b93c1fa5429db1181d27386893b5fb8c7c
SHA256
10caa94cd2817afcdf6925ea848a78e384e54a28e54741da1f55eaf8ec276a76
SHA512
07d3661acca634b6c9fba858ab4f21274b5c1fa99b60e30d73f5937972323829e6631776950029d75e6383b46eabf9a316173e21c1f3d6d242dab37625624009
SSDEEP
12288:PmnzP7VfWMH8g54poSi4olUh4qeyqGhjh0fXg:EVHMTSBqrhj2fXg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
bc05e27246d1f12ce730a5402fd94d1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE