_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
e08f8a09a85fc9957ebec678e0b0bebc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e08f8a09a85fc9957ebec678e0b0bebc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e08f8a09a85fc9957ebec678e0b0bebc_JaffaCakes118
Size
34KB
MD5
e08f8a09a85fc9957ebec678e0b0bebc
SHA1
657944ffa5d05a54019ab8c982c68321179d1421
SHA256
0136ab82bd9b78bdf9a7268c2fb7cd272b8782ad94357a5b8dc626b4d127a538
SHA512
9e6810f46452c5bef40adde1b361c5db0707503c665d9b4dc914f40e9a331d81ca11d6e1946bb043633d5ab5fdbaa2d2d973840577bd4c21562dc5042e56b769
SSDEEP
768:noi34itYVsQHqVNJMJcP7M2MOIRGxMWaXE8qD+KU+1nbcuyD7Uwfq:oiIiu9heM2MOuEMWa0803UEnouy8wfq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e08f8a09a85fc9957ebec678e0b0bebc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE