_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
1075473b2978edd027b31f68fdaa955a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1075473b2978edd027b31f68fdaa955a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1075473b2978edd027b31f68fdaa955a_JaffaCakes118
Size
34KB
MD5
1075473b2978edd027b31f68fdaa955a
SHA1
9f6276bb5cc6043a87b95ca6ad26d25ad0cbc6af
SHA256
8a6511007c5733354512beed88fc1dce287a0bd9616b04652a8d5a35ed91c8c4
SHA512
b52ba6cb62613f0eb72c8b7f0c322e44c33ad942e6a9aae5d3cf3787d35815915e66cc542e97efd13d083f40e9279c5b00f395836758e5874f93d78187d5e798
SSDEEP
768:jgeUxHpbt4Vw3N0e2YkDVjK4trS2x7SoI/9WOBw61PafhCnbcuyD7UAfa:jxUHt4Vwd0nYSZJko6FC4nouy8Afa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1075473b2978edd027b31f68fdaa955a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE