_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
f69a3eb1ed75aef553b8210c7f24d9f2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f69a3eb1ed75aef553b8210c7f24d9f2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f69a3eb1ed75aef553b8210c7f24d9f2_JaffaCakes118
Size
36KB
MD5
f69a3eb1ed75aef553b8210c7f24d9f2
SHA1
8c3ac07ae6cd24edfc3b7ed078070a0c1041283c
SHA256
1d1830cb435dc81ed2a222bd30283b289497129a950e74655ef6549f4ce350d2
SHA512
83ba781cb8e8774f5f7d704f00a2bcf88fb93f399d557819cdb09958b2796fb0f96cfae767fe2a0d5b35e59cdb92d27bc9343b1555ce7a3302869f6f6eb5aa10
SSDEEP
768:KbYuaonT3EzXZPelnhQBHRctjh8Zh2Bnbc46bNtly3WYoGVxzknbcuyD7UECd:KbY7MEzXFY0HnZGbcdbNdGVxzknouy8J
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f69a3eb1ed75aef553b8210c7f24d9f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE