_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
13f28a7764c075a8a28db53c5e43aae6_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
13f28a7764c075a8a28db53c5e43aae6_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
13f28a7764c075a8a28db53c5e43aae6_JaffaCakes118
Size
34KB
MD5
13f28a7764c075a8a28db53c5e43aae6
SHA1
806a108cc82f6d44519cae568e4ab459d32143ba
SHA256
3ea128c03c0472a4d94ef2930b229acf36be0518b830804b40258c3f224f736b
SHA512
8e51abf69f2213a739d4cc486f2203ca0727d5660e7af0799343c75110ef2914981c5b15de40e24ccb7ceec159984bd788421b36d7970b22ef90435c28bcf4d3
SSDEEP
768:p+24iMbqQFBruzXXCPwAy9x43aMZYP3a2HwuCpTlTieRAfOlUdnbcuyD7Uz6T:pGiMbDuznCPwA04cK1Ae+GOnouy8z6T
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
13f28a7764c075a8a28db53c5e43aae6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE