_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
15151baac64abe3b307c81c8707f6c9c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15151baac64abe3b307c81c8707f6c9c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
15151baac64abe3b307c81c8707f6c9c_JaffaCakes118
Size
122KB
MD5
15151baac64abe3b307c81c8707f6c9c
SHA1
135af77a175456a7b29cdf922e4db9658c6679d0
SHA256
4db6a4fcea9fb2e7ceda7c131ec4e41860a8896a1d57bcba515eb9524ed8bbdc
SHA512
132fff28c1c8e628cd2a1b2678f837664eda79fa437b227be89ded128a2526443a857c4b5fd8e7260f7afb0fdbe72da3504ef91a27a517cbea4d7762928005f6
SSDEEP
1536:StubDUw3lbQ0zTjb6CuI/CI+33gmv4YZSAjbqsbxI5yXnouy8dROQ:ScwooH33gmJb7tIyoutDOQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15151baac64abe3b307c81c8707f6c9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE