gytfredwse
ServiceMain
rftgyhujk
Static task
static1
Behavioral task
behavioral1
Sample
062304e8b9c6fab970560615b05582bd_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
062304e8b9c6fab970560615b05582bd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
062304e8b9c6fab970560615b05582bd_JaffaCakes118
Size
46KB
MD5
062304e8b9c6fab970560615b05582bd
SHA1
b8255a0408f8e4b61d5d688a98a5d64be245bef5
SHA256
c87b54b1db7036e9c938e3c4a0db6063ac1a9364d62662ac6563d823bc7bd103
SHA512
7595c305f276121da2440d1d1a828bf89663b40804463e3b9ca36bb887df62cb46c49c741147c5e6ce04dcefb8950c1f90624e9590656c07943cfdb7632d361f
SSDEEP
768:0L2hSa9JlIrPczLiLC4Z1cYw8KdAxKElhVFEzRMvYfTaPUkeJvxgJtZ3:0Le3jlI7czLiuyuYwRnkFgMQkkvMt1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
062304e8b9c6fab970560615b05582bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gytfredwse
ServiceMain
rftgyhujk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE