_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
2f23631818311c9b2213878f5fd87bcf_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f23631818311c9b2213878f5fd87bcf_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f23631818311c9b2213878f5fd87bcf_JaffaCakes118
Size
118KB
MD5
2f23631818311c9b2213878f5fd87bcf
SHA1
b7b70c3d606b5fa242adeecaab3f177eea988947
SHA256
c663e47e78a82cc1d4001e50bae0e51c94b01582bc2108f54e6d81a613419011
SHA512
c29206a94c0c480b48ea9a78d089dbdc9b9aadec11606617e59d0175554e2473bb54a16a6a18a8a7b556118f6f8c56372ffc3eb3745eae64f901744aeaedbfd3
SSDEEP
1536:9oFDDS7LFiLjnavBSsOnOonMaPJtSNBeAtwnouy8QfG06g:MIFYjnav4bnOAMaWeAt4out6W
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f23631818311c9b2213878f5fd87bcf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE