_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
30655dced53b5502be54bb9b8963910c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30655dced53b5502be54bb9b8963910c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
30655dced53b5502be54bb9b8963910c_JaffaCakes118
Size
36KB
MD5
30655dced53b5502be54bb9b8963910c
SHA1
991ef2d0dc1e4ffef1114a22ee619c7c69f14a0a
SHA256
2b79b784ebff22588ebfecec635cf8b840c9ec585fb877cd91853bc91a2ba908
SHA512
7005f501d7d1d1b82019e1142a0d0a66dc616e1ae41b0635d90874434691bd12e274d60f72c06f0516e17037dc02eaebc1a3f523adc99548f64def94db40f156
SSDEEP
768:EHLbP5+8sNxZ2RP9tMiv1hfZvzpKDjV3lUPIQdAhsnbcuyD7U0:8b5+8svZ2ueDZvz6fTsnouy80
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
30655dced53b5502be54bb9b8963910c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE