_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
d0aff4bbae601722a323da08d6315740_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0aff4bbae601722a323da08d6315740_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d0aff4bbae601722a323da08d6315740_JaffaCakes118
Size
38KB
MD5
d0aff4bbae601722a323da08d6315740
SHA1
0a0f5e274c9235b073a430789713ceb9427960b8
SHA256
ca4b20b554746fbed86f264fa5ee2247d51c77e1c4d4e1a5ce9321d2887bb170
SHA512
b17eccc70ea35df0d6df1133d4f59f9050753ccd1abcd4321bb8f378f8cadb2081759d3b7f55398076d1dc2d24362054f128354f8a2af210b66d4c2da1ae025b
SSDEEP
768:X72EtfWfm+ZgTlShj1dESUOpP7KqjHEMc72pUnbcuyD7Ut:XSMfWOMQPSP2mH1ciUnouy8t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d0aff4bbae601722a323da08d6315740_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE