ServiceMain
S
Static task
static1
Behavioral task
behavioral1
Sample
fbfd71972763ef6e647c1fb2c26bdbd1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbfd71972763ef6e647c1fb2c26bdbd1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fbfd71972763ef6e647c1fb2c26bdbd1_JaffaCakes118
Size
125KB
MD5
fbfd71972763ef6e647c1fb2c26bdbd1
SHA1
cf0e30adf5a87213c0acefe1dc5d6f89e79ce076
SHA256
63635cd24cede09acebaa215af71733af8e6e9d5574ffb030d9cac0a1e614536
SHA512
cd26cfc1e50ad22b1f74b45fa8bf8c49c6adc20f576e1bb6526fd4dc12320cb3ee84694a7924d2553c9e4b6b9b6a3c279d887e3507f5625e5ce62d08cc1f5cc2
SSDEEP
3072:OFQ8IAaPXUjigqHIof4MhZfDQGq5iUzsk0YUXkPKLkJg5:w4XUjigqHIofMiAoxXRB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
fbfd71972763ef6e647c1fb2c26bdbd1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ServiceMain
S
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE