_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
bb1b6c2b14d2d9a551ebbf783477a5c2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb1b6c2b14d2d9a551ebbf783477a5c2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb1b6c2b14d2d9a551ebbf783477a5c2_JaffaCakes118
Size
39KB
MD5
bb1b6c2b14d2d9a551ebbf783477a5c2
SHA1
289752714117e7881152f830f8598a7a748fce3b
SHA256
ff6d80418eda7058159336f2b1615b2e3d309822725ec53b0fa206aad0472eba
SHA512
a6923e60b01cd481ca61b8c287095a37da1b0a923b7abffc946befffa116d37ed67ce70c44d15f2b3cf785adc29b62b45203f93894e4a59f3633b9159031643e
SSDEEP
768:1T2TXfS9CGwU6l3eVUcd/DQ9iyi9sAbyA3Xe5TbAJ/nbcuyD7Um:1THIGwU6xkvdEi9sAj+VMJ/nouy8m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb1b6c2b14d2d9a551ebbf783477a5c2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE