_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
b6ddb9ddd2d97fb795a941bd39c48645_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6ddb9ddd2d97fb795a941bd39c48645_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b6ddb9ddd2d97fb795a941bd39c48645_JaffaCakes118
Size
34KB
MD5
b6ddb9ddd2d97fb795a941bd39c48645
SHA1
625c1d9c0d7b0c2c4ac4fa98161339f354207f3a
SHA256
50d956ad30776f571edae5c0a70296b788a14a2d8161e30fcd773e428b832a1b
SHA512
d92e0d46d5cabfe3579fc72b0cfabd42894fe2db91855b31cf5b3ef68394585c5f7e02be2981e3bef9bee80a6481d8fc12d639a5b9c5b6dde6d38827ad0d3de5
SSDEEP
768:WgeUxHpbt4Vw3N0e2YkDVjK4trS2x7SoI/9WOBw61PafhCnbcuyD7UAfa:WxUHt4Vwd0nYSZJko6FC4nouy8Afa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b6ddb9ddd2d97fb795a941bd39c48645_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE