_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
a009fddd0f1f75f2a90fc2e068f129e7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a009fddd0f1f75f2a90fc2e068f129e7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a009fddd0f1f75f2a90fc2e068f129e7_JaffaCakes118
Size
38KB
MD5
a009fddd0f1f75f2a90fc2e068f129e7
SHA1
22185f45f69fa9240784ae083b2945b1dc7105ae
SHA256
6da80334dca1bd891be81f14a3f9377a2e221ed6bf27157ea323f5c1ca4890f8
SHA512
03ba59245d03607524f66b0a03b4e50f7a950467b9275440a9cd1a41aa2ca931f14e188cbf4f484b5b1849f85eb86423f9857e297b1271ca30701e9465d16494
SSDEEP
768:f72EtfWfm+ZgTlShj1dESUOpP7KqjHEMc72pUnbcuyD7Ut:fSMfWOMQPSP2mH1ciUnouy8t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a009fddd0f1f75f2a90fc2e068f129e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE