_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
dfa5a829bbe1705a4dd6fe733bbee588_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfa5a829bbe1705a4dd6fe733bbee588_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dfa5a829bbe1705a4dd6fe733bbee588_JaffaCakes118
Size
34KB
MD5
dfa5a829bbe1705a4dd6fe733bbee588
SHA1
45bf991194b133dcdccd80f9df9aa4ef417cd5b5
SHA256
d4b0360b386451edb01b3ba121d9a2b0b16950d9ae13424aba193999806dbe6b
SHA512
c8b7b80163a51e42a708b21ccbd174c66f251395c1008242d0f7616c685e1c3419289313e6f3aa32a562262404956e9a3aad0dd9accebe7f1eddc39e992c3696
SSDEEP
768:Loi34itYVsQHqVNJMJcP7M2MOIRGxMWaXE8qD+KU+1nbcuyD7Uwfq:ciIiu9heM2MOuEMWa0803UEnouy8wfq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dfa5a829bbe1705a4dd6fe733bbee588_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE