_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
35071d3230a5b54eb74456b99534849b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35071d3230a5b54eb74456b99534849b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
35071d3230a5b54eb74456b99534849b_JaffaCakes118
Size
34KB
MD5
35071d3230a5b54eb74456b99534849b
SHA1
16eff5455f4c25b2a435721dba72f5e3adb5b4e8
SHA256
9e336ceb40913826b19e60dc2fa6f44d8fb05aa74e97266b8095657c9c710422
SHA512
2844d8fabf24791dd6fa9b64dab30ee78b8597eec0618a83dc684a5c9df94c1ddcea88f419e3643897e6f65485f8fccdbc6777d88f3c164fc4927cc81519db50
SSDEEP
768:x5+1X5qERrx1lEIw+4Q8AqLENEy2WMs3O/4nbcuyD7UQfK:x5CpqEpeZp9nWLnouy8QfK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
35071d3230a5b54eb74456b99534849b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE