Install
Launch
ServiceMain
UnInstall
Behavioral task
behavioral1
Sample
55dc12e49a2795c25d0912e054c3c0b1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
55dc12e49a2795c25d0912e054c3c0b1_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
55dc12e49a2795c25d0912e054c3c0b1_JaffaCakes118
Size
309KB
MD5
55dc12e49a2795c25d0912e054c3c0b1
SHA1
b6bb15356cc76393e09890a9dbc931cfef3b5907
SHA256
e7c8b0b67629284c19fa621314d84e90a5166628b20357cb57ad1fff69852450
SHA512
4bbe06b5551380494e01730dd4edf9738c3e1b95ab3bac74a014b87e307b9406eeaa61ffc57f0cdcad606d5549e4bc87a52525489c51d2bee6ed4ee7a5ae5f69
SSDEEP
6144:Qa4a0XtEWH318iYshu1hF/wJ/de6/db/625nJ1p7wI4yfv50ioQpVzfU4Xw0jZ:QN9nHDJhmql5/db/6jnyfv5FoQrPw0jZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
55dc12e49a2795c25d0912e054c3c0b1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ