_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
fc984371b8c47fa86f612ee96d3db59b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc984371b8c47fa86f612ee96d3db59b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fc984371b8c47fa86f612ee96d3db59b_JaffaCakes118
Size
34KB
MD5
fc984371b8c47fa86f612ee96d3db59b
SHA1
c6085fe650d9a277cf7865d9f7b714211bd02418
SHA256
6e3378a411e8331e1060bf2b201b03a3dc1c156f61540631094265911cda2107
SHA512
ad55edf2dfbe958c62c14abca55fed0a481e1aeae7960d748ad856283f51acb6f4103050d8ffc335edf226c611b75ca6cdd5fe3fbc79bb3d2f9d61fdf4372c75
SSDEEP
768:igeUxHpbt4Vw3N0e2YkDVjK4trS2x7SoI/9WOBw61PafhCnbcuyD7UAfa:ixUHt4Vwd0nYSZJko6FC4nouy8Afa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fc984371b8c47fa86f612ee96d3db59b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE