_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
09a75f76c0441906d41ad7a5f248685b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09a75f76c0441906d41ad7a5f248685b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
09a75f76c0441906d41ad7a5f248685b_JaffaCakes118
Size
118KB
MD5
09a75f76c0441906d41ad7a5f248685b
SHA1
c09698275db78672e50c49356df8aa74f4a2ed64
SHA256
3f09750312d237e6f4ed5c7793c444306ca818fbeab7a2e681a36530de638cd9
SHA512
9d97c4e7a9aad89ca2e5997beeea8bd1e6b15bc709f6f23795884e8b1919b6effbc8244eb7efed640b901a401bb81068eef290a63f2e5b7ad12ca2d05d226779
SSDEEP
1536:x8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:sIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
09a75f76c0441906d41ad7a5f248685b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE