_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
439860f9b5edffd5bde657a88f9def0a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
439860f9b5edffd5bde657a88f9def0a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
439860f9b5edffd5bde657a88f9def0a_JaffaCakes118
Size
126KB
MD5
439860f9b5edffd5bde657a88f9def0a
SHA1
4f0b9b08f048364c2d80022ef4bbb1366a5fc1f9
SHA256
ccae6d172b63bbcc6a6603dfc51f5de737856ec7220d50b17dc5f40de9cffcf7
SHA512
a8c20a765fa5c89cd0717c59ae549253d63cf69ac5e6d7ab3f77b544061775f82727ba287a98341783db1478b9c2b3aaad142fd3ea6588a07e69e343074260ac
SSDEEP
1536:W7BOEx5XDD8Pa7HVB/MQUQeEV7UoFiXzTBkm1C9dP4fxIZ8dfjbU+sGnQanouy8W:ABxna5jFfC9dUPZbXl7outkHg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
439860f9b5edffd5bde657a88f9def0a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE