_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
eb6c153c61892f0132af6d40fb8b81c8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb6c153c61892f0132af6d40fb8b81c8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eb6c153c61892f0132af6d40fb8b81c8_JaffaCakes118
Size
34KB
MD5
eb6c153c61892f0132af6d40fb8b81c8
SHA1
8ebc73b118663f279e3be9fc55ab41e0239ba9db
SHA256
1180c5cc2352630c8b20a389445f622eb08c6d51a0c6dc055e0aab2538ab7f50
SHA512
d3dc5b5909998a10ae3aa4326483746db6f375d4772ba809372f357bb2857ad43a940385ce61832815d4d0e4169cac7cf1d12cf322872444c0b591c952aae8d2
SSDEEP
768:NgeUxHpbt4Vw3N0e2YkDVjK4trS2x7SoI/9WOBw61PafhCnbcuyD7UAfa:NxUHt4Vwd0nYSZJko6FC4nouy8Afa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb6c153c61892f0132af6d40fb8b81c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE