_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
34e17c31eda79e7a79262dff3bb47853_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34e17c31eda79e7a79262dff3bb47853_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
34e17c31eda79e7a79262dff3bb47853_JaffaCakes118
Size
118KB
MD5
34e17c31eda79e7a79262dff3bb47853
SHA1
dc0d973938e5bee8ca04c172d1b8edb081e201fb
SHA256
8262adb2e645570dfad1adc4651705ac62e2a55fc31e0fce8b57ca0c764de357
SHA512
8da8370f92bbc982187d24fd507ff2b82ff4319a3a1a0b1cc6b19a63e3aaee6a74db412f0eb3222fab43515a9fcab19d577b3b64586e9f2ab785a3c2f8b85509
SSDEEP
1536:W8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:HIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
34e17c31eda79e7a79262dff3bb47853_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE