_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
0f9a980f60f9ec0e5e298738eacf2d00_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f9a980f60f9ec0e5e298738eacf2d00_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f9a980f60f9ec0e5e298738eacf2d00_JaffaCakes118
Size
34KB
MD5
0f9a980f60f9ec0e5e298738eacf2d00
SHA1
5eaa52132b95a04a9b694f523581f7728f4a2437
SHA256
609eeed37d6df220c1b9ef674f18852766cb8abe57c9ba4941bb5aed1d69f400
SHA512
e21451c7e6717940d6e5d75516a1864c7d2226bef3ada971151519ba8e93233b1a7b2a9566664971f99eeef78836167dd93cfb47efdf235e75f7f281a27d904c
SSDEEP
768:Kz2hE5UJgPiNhqyZ04JkKvZOA6I6DYn7uAJf66dXHnbcuyD7UIL:Kz4E5U6GhqkJkKvZ2IkYa+XHnouy8IL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f9a980f60f9ec0e5e298738eacf2d00_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE