_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
2d63034b63b10ddbaa3bfdd73401a4d6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d63034b63b10ddbaa3bfdd73401a4d6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d63034b63b10ddbaa3bfdd73401a4d6_JaffaCakes118
Size
111KB
MD5
2d63034b63b10ddbaa3bfdd73401a4d6
SHA1
6b2f8797399e4bc169862e2bcbc54b0bbec20f44
SHA256
9e634c91e3b29ac7fc046f8eac602bd7de78f3aa979c8ec54885059774f23a56
SHA512
0ffbcc76a71a898b9c94843ea2d1976c98221fa1ca753d1b63bce7ff64d884fbaaf93a2dc9162fa4eb7d3dec7f05287f39e5e4e04bb9d8a875fa0995b70a6f99
SSDEEP
1536:D8jtlPxwPTK1uWNR7eHDS57V7sXU9KwM9b8YRBH0xoKoIGj542Hf8FG9A:QjXP6TK1uj8V7sXUyuoIGjd8FOA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d63034b63b10ddbaa3bfdd73401a4d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE