Install
Launch
ServiceMain
UnInstall
Behavioral task
behavioral1
Sample
0d1723a1f9b4e2a03debd57baf6ab166_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d1723a1f9b4e2a03debd57baf6ab166_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0d1723a1f9b4e2a03debd57baf6ab166_JaffaCakes118
Size
309KB
MD5
0d1723a1f9b4e2a03debd57baf6ab166
SHA1
a0937e1c2afd179b61967f394c9bc739037f5e5f
SHA256
e131d61f99a1a2d5582c558692660c38aba3812490c403e134f40f4e3a44c606
SHA512
4501d8c7fdbe4f694fd2c2d15288cb7a595dddedd53fb857646f1b94be9398f85cbd304746e38cc02ed4e6687e623783b733415185073814c9187da224497fd5
SSDEEP
6144:Qa4a0XtEWH318iYshu1hF/wJ/de6/db/625nJ1p7wI4yfv50ioQpVzfU4Xw0j8:QN9nHDJhmql5/db/6jnyfv5FoQrPw0j8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d1723a1f9b4e2a03debd57baf6ab166_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ