?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
Static task
static1
Behavioral task
behavioral1
Sample
169647cb308ebc78f33fdd24943ecd72_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
169647cb308ebc78f33fdd24943ecd72_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
169647cb308ebc78f33fdd24943ecd72_JaffaCakes118
Size
308KB
MD5
169647cb308ebc78f33fdd24943ecd72
SHA1
c10d6e7833d6045f2abb4fece0cb73ab5e916fb2
SHA256
b8814c81673301158e9c62549360225c507ff88de5e4861a85520a087360f7a1
SHA512
0407dea65c6a321755e883d60ee153019cb8f4a0190aaf8885c336365cf7f1229564cf95c0fc6dc5f4cb156a04eb15bc91ef70949b5d012fb3ec26985023b487
SSDEEP
1536:MSOFfr/lQ4/W0gPZ8ivFQO8ejYAa1llVjzJhqKaeLfCQYHc3cimnkwQNk:MSgfrvHgai9QKabLaMq630kwWk
Checks for missing Authenticode signature.
resource |
---|
169647cb308ebc78f33fdd24943ecd72_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE