ServiceMain
ResetLMHK
Static task
static1
Behavioral task
behavioral1
Sample
437bd4e62fb0a700ca62dc9d00b3d96d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
437bd4e62fb0a700ca62dc9d00b3d96d_JaffaCakes118
Size
94KB
MD5
437bd4e62fb0a700ca62dc9d00b3d96d
SHA1
68807dddbe390b853287c3ed4245d9fc5a53543f
SHA256
ca6c82881eeb4f93b2d3b336aa7c4ffbcdd912de3b6727b159ffa6d89f9be314
SHA512
34ea4c3d62701df409211488e9538579d622aeb6f3ce686db6164f4e8226d4eaa7458efa9b416007f11ec9caa56048a81e6975f69fbc58fc03df25bb3a994f32
SSDEEP
1536:xRhShXpDpHKz0Nv5NBzPUzDwsZhBCp7h31:xRhShXhNhpUDwsZhBCp7j
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
437bd4e62fb0a700ca62dc9d00b3d96d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
ResetLMHK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE