_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
35145078ddf7d3b7ce9c101059d68916_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35145078ddf7d3b7ce9c101059d68916_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
35145078ddf7d3b7ce9c101059d68916_JaffaCakes118
Size
118KB
MD5
35145078ddf7d3b7ce9c101059d68916
SHA1
73f0b0130a9a282b136296df3a3b465b2440565c
SHA256
26583e49604c201cec36dd9dfd3c62a047f34cbf5d82bd6180e1f0f54052d994
SHA512
8458bf73e19dac281636494f60dd4539c7948cf3d4bf103f02e02ce4191caf99c6d97ddbadb5ac73ab81a5613405980c962dd0c0a31f3a1a9a9700416f93d77c
SSDEEP
1536:l62tekbEM2Y9CsBoZ8DKPPssOBG52AtcGFnouy8T6GU+:PQdM2YEQoZ8DWF2AtTout+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
35145078ddf7d3b7ce9c101059d68916_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE