_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
33c58adf360bc3b4a1a565322f9ca8b1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33c58adf360bc3b4a1a565322f9ca8b1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33c58adf360bc3b4a1a565322f9ca8b1_JaffaCakes118
Size
38KB
MD5
33c58adf360bc3b4a1a565322f9ca8b1
SHA1
27a20cb4d45966685e27efc8e479d468b3b4f60e
SHA256
cc1593a416ca59e49ec6c946e0781e422ab511235f0b6a8371d749f4f6ba9ab9
SHA512
a1bb0c50a5153b84c8a6d44775992a69de9de3b2c9471b7a0ef9aba4658535104ac25adb7fe99b0527a8dc96dc6c99e998c56473a86186c039914f50b9197fcc
SSDEEP
768:U72EtfWfm+ZgTlShj1dESUOpP7KqjHEMc72pUnbcuyD7Ut:USMfWOMQPSP2mH1ciUnouy8t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
33c58adf360bc3b4a1a565322f9ca8b1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE