_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
25ec5b39182046420da328c3e87e9e68_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25ec5b39182046420da328c3e87e9e68_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
25ec5b39182046420da328c3e87e9e68_JaffaCakes118
Size
34KB
MD5
25ec5b39182046420da328c3e87e9e68
SHA1
73e47e93062d6276140fb2464d9a193341851d7a
SHA256
c9b1eff5da871c0bd6379adfe9c78f7e382564709c1ffb3f4a0f1978f7c859f9
SHA512
a072cc9c2d54c195d825c838c11e5db675c89431f6ee1c9a0869e03a0cc2a809621043d457755003a6264505400ee787f50f363ea5ab0d0ed57ec96e83ca3cec
SSDEEP
768:W4sXwpt0tslrEHgMHuZKiD4q77WZmCO1l3ok8GVwnbcuyD7UQfK:WrEtMQEdu8qRCA8uwnouy8QfK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
25ec5b39182046420da328c3e87e9e68_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE