_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
eb331dbda2fc8c216acd8b43ae55ce7b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb331dbda2fc8c216acd8b43ae55ce7b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eb331dbda2fc8c216acd8b43ae55ce7b_JaffaCakes118
Size
34KB
MD5
eb331dbda2fc8c216acd8b43ae55ce7b
SHA1
4e389546baee0cb7d4853f02942bd12c8ac46a80
SHA256
dadb6037c6e83d8f74a6dd7afda6c08b5743a9302ea49fb2d2b70291510eac3c
SHA512
39c861743ad54281e5277737ca5ca3b868bac9c938877a7bf6cef8469998eaad7bacdee77f2c8c74b29f124d79f8d99e384db37a9674c033d18ce404306700f6
SSDEEP
768:MPU3OsNdHe3MiXcLaTQVzb1eRh0xWouyvnbcuyD7U1s6:MPU+i+3MiXcaTTh0xRuwnouy81s6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb331dbda2fc8c216acd8b43ae55ce7b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE