_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
38f19d4219b45f7e5f33b4fa446b1288_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38f19d4219b45f7e5f33b4fa446b1288_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38f19d4219b45f7e5f33b4fa446b1288_JaffaCakes118
Size
118KB
MD5
38f19d4219b45f7e5f33b4fa446b1288
SHA1
be62ce24bb1e2454104d59033ef5c7d1e86e43c4
SHA256
f00c8270ffe8318c40a2b41e2d4838852eed6a1a8fe9dce9a54f4abf9892e662
SHA512
04cb53b3f11b1ec5423743c3e36757b4c35fed0a89a7a68c70b5e5c18ed444667abc5a5f3dd5f6bfd056404ed5b4eafac60082e6739f1e792c18123873ab126d
SSDEEP
1536:goFDDS7LFiLjnavBSsOnOonMaPJtSNBeAtwnouy8QfG06g:9IFYjnav4bnOAMaWeAt4out6W
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38f19d4219b45f7e5f33b4fa446b1288_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE