_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
270c54a6c4149724568a014fe5c734b5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
270c54a6c4149724568a014fe5c734b5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
270c54a6c4149724568a014fe5c734b5_JaffaCakes118
Size
37KB
MD5
270c54a6c4149724568a014fe5c734b5
SHA1
0fe3efb6e93cf07f5fd0c5ab3c2871cd3115ef0b
SHA256
e82c33f8c3a6f8fc573d3cd509f5a5cab0a859ae901fc49b6b38dde240ce6bf7
SHA512
fa870e9a99945b06ec18232343494e1ee41621b67c0abd146def0564cd7ad0875876081f0ecce7458610e0885867d2495edee33f9567cc07c1f1e27908bdc553
SSDEEP
768:XgvRYQ6Tu98ZXmVhXqAi/mu3QcHRItXyXnbcuyD7UdR:wvRYQ8W+XmiA8pFxI5yXnouy8dR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
270c54a6c4149724568a014fe5c734b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE