Kisses_Mcafee
Kisses_To_Trojanhunter
installhook
Static task
static1
Behavioral task
behavioral1
Sample
3edc48ea8bd260220218d8d68cf06e6c_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3edc48ea8bd260220218d8d68cf06e6c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3edc48ea8bd260220218d8d68cf06e6c_JaffaCakes118
Size
9KB
MD5
3edc48ea8bd260220218d8d68cf06e6c
SHA1
4fb743062a18d3ad51e544a82eb47e29c647399e
SHA256
c016ecefcb6a7e9d5bf2746908dad8489aedbf3d35e30c0fa1af34b1d9c34b2f
SHA512
4ee5eb923319a6a570781aa006c3a2a9c1aee33588f7443a4f85b6a98a2212b44930c920a7173e230c03d09ecbd5ffe2bb24ae1c46831fbfa6391904ebf790e3
SSDEEP
192:NXim6kqZ4rkMzvpz3bCkOJ4ppG+zB/wvOdd+5mV+52g+/z:NyhkqyrkMjFbCkm4pA+z13+mV+5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
3edc48ea8bd260220218d8d68cf06e6c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Kisses_Mcafee
Kisses_To_Trojanhunter
installhook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE