Install
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
2613f9159cf2af041ba9b04282e601f4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2613f9159cf2af041ba9b04282e601f4_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2613f9159cf2af041ba9b04282e601f4_JaffaCakes118
Size
66KB
MD5
2613f9159cf2af041ba9b04282e601f4
SHA1
4bc6e7d990738528b3f6fc52a8c7a8ecbeb70a2c
SHA256
e45e8f1c39225c28638fa2ea0cec10cfe868637a4d55548f41be165e50cf36b8
SHA512
0a71cb3e5077440ccc4ea56723041bd4fa0d5d46a0a2573e8e0b0cd7878938a4f3ba9d75f2e6a6adc0ce0562628735469f456c8526048724f80d019b32cf96b3
SSDEEP
1536:jnJJ8KF0qcn+GJ4vwGdioH1i+RkehPG4K:jr8yrcPcH1i+RRhO4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
2613f9159cf2af041ba9b04282e601f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE