ServiceMain
ResetLMHK
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_41068841ecbb2eb4fe5791228d5bc6da.dll
Resource
win7-20240903-en
Target
JaffaCakes118_41068841ecbb2eb4fe5791228d5bc6da
Size
94KB
MD5
41068841ecbb2eb4fe5791228d5bc6da
SHA1
c7846d97983b81e9339619124b314accc8cac1b3
SHA256
1cc93368964f131236249874b286a60b2b3863cc462fe096d793de7f2f99d031
SHA512
50d04be823cc8d43702f7c7c1c25e17ea985676a95e8de61bb84921493237a2ed8550b2b3e1c2a25816768a73f377749f81175b81cbd24756fd70b0d38e0c30d
SSDEEP
768:vmhyiMrFFocw9KfbcWjG75GVObBA+7dFowRyF4ahqW468ExA:vmhShXfnGtnQwsKahg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_41068841ecbb2eb4fe5791228d5bc6da |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
ResetLMHK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE