_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
14176fa864febccfb7d1cb5410c37634_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14176fa864febccfb7d1cb5410c37634_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
14176fa864febccfb7d1cb5410c37634_JaffaCakes118
Size
35KB
MD5
14176fa864febccfb7d1cb5410c37634
SHA1
85f7d9dc7917a0af6f900914c290d8d3a904656e
SHA256
8a4b067efc9a12c4461b7dceb2f23f7296b42f61ecf24646a84c2efdee0d2c13
SHA512
881fe9ca165f9eb0acc6a326de5c5942d9e94366c1f04ddf578865497ca7fc86a5edd6c9886899857e027933e8d121cef6b8cef64b214781814b0c69932ccf24
SSDEEP
768:Lgpl78b0onCNKHt9imfPrUoC7jJeZGj54n2Hf/kFG9:LAl78jCNKN0mn9qQGj542Hf8FG9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14176fa864febccfb7d1cb5410c37634_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ