_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
09ec27ffa1169a7dc2a896a053e26d32_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
09ec27ffa1169a7dc2a896a053e26d32_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
09ec27ffa1169a7dc2a896a053e26d32_JaffaCakes118
Size
118KB
MD5
09ec27ffa1169a7dc2a896a053e26d32
SHA1
7e054ce788d648e3ce18c43ce85f94ea9204ff57
SHA256
967668454888ef0cc9c855a3cfe774ee64cda7104e36ac5d08f271d648ff5150
SHA512
bdd478de62464347d0ba2dfc6774497f51c23955beb9a6e6dec476df89b50326d207a570f915b2685c99d65c0a4b1cf1ef9828804d981b5a5c56e1e0914c45fd
SSDEEP
1536:b8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:+IFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
09ec27ffa1169a7dc2a896a053e26d32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE