_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
0f8719166b8eb39152a03026ed553797_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f8719166b8eb39152a03026ed553797_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f8719166b8eb39152a03026ed553797_JaffaCakes118
Size
37KB
MD5
0f8719166b8eb39152a03026ed553797
SHA1
d6d6ef37b6a25e98d5824319e5d0f88dc45f3f13
SHA256
c0b9e3c9eeca6e727cef766a91f12a188558570bfd5fcfc691021ea40ac8600d
SHA512
b9835c074d02492f26c156205729d5a3ad1f2c16ad884108ba3e10fd146dd4ea83f75221914adc8b3ad3dceaab8f3a567fc6307a5479aa8be6714706f46916cb
SSDEEP
768:iGZ/5dGaPumQuLXgMNXVZuWnPfYbI1LmrFPtwqpnbcuyD7UX:iGZ/HG0DxsMNXfJPg0pmNqqpnouy8X
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f8719166b8eb39152a03026ed553797_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE