_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
083835c8832ceff3f8b4dc7e96230c39_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
083835c8832ceff3f8b4dc7e96230c39_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
083835c8832ceff3f8b4dc7e96230c39_JaffaCakes118
Size
129KB
MD5
083835c8832ceff3f8b4dc7e96230c39
SHA1
23587b4b6a755f1060d0a4ed35132277155c7252
SHA256
f173a83ba77b60b5529e75671f9e3e37b3b42b638e5284cf256318bb67e72bfa
SHA512
a8479e796963434145887092bf899334dcea3dc3edfddd602d06d3ea9e70457c4a47e06b9b544510886e458cb872cae8654621bf33225695795b8b92fa5228aa
SSDEEP
1536:ai+Zx52HDaBX7VciNJqGpkpiomXHlsKAT3oAt5bBBnouy8Po+:abZX2H05AGpyiom1qoAt5VhoutPo+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
083835c8832ceff3f8b4dc7e96230c39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE