_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
484a2061b2c70a59ca7ebac5a1ae8808_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
484a2061b2c70a59ca7ebac5a1ae8808_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
484a2061b2c70a59ca7ebac5a1ae8808_JaffaCakes118
Size
34KB
MD5
484a2061b2c70a59ca7ebac5a1ae8808
SHA1
387960603fb6adbc7ee0c187c5cb38667e4585fe
SHA256
c4a4f54cdc3d3556298505f00a29942092db13cfa75c879e23da9a22312cce35
SHA512
07daa221c4aae8f0f07916f6998195095cd3f0835b8d699404dbbd133d64e9a4b16b6505cc9e65e2b29df7ddce22383247e0181ea4c7900b6a9cab1fd3fd1607
SSDEEP
768:KJkAQU5+Jx0bVnBimp2U0OWris2OGBnElqAHId7Rm1kf9pnbcuyD7UTAz:KJ5QU5dn11Yis2dAHDafXnouy8TAz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
484a2061b2c70a59ca7ebac5a1ae8808_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE