_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
40688728ef7ab398ec5289581b180eb2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40688728ef7ab398ec5289581b180eb2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40688728ef7ab398ec5289581b180eb2_JaffaCakes118
Size
118KB
MD5
40688728ef7ab398ec5289581b180eb2
SHA1
96af475cfae8470b4b6e6b032731e969cf920660
SHA256
709fcb12c5de6d9e3fbee84e74dd4886adc84c1992a5fbc978dcfced2ea411fc
SHA512
c6ca912460c78a2e6fbf5a10e22c6c96544baeae3f9f800a0f01ea5ec10d140eac2a4e5b4170257a1f8435baf01fa9d94c24bd9e433cd87f05a10bfaae5d58ef
SSDEEP
1536:wHC5VAwYMvza4xesRFbv1LigmAWgPkMDgzAt5+enouy8cBG0muR5:LYM7a4kgttLBrWgAAt5DoutMiuR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40688728ef7ab398ec5289581b180eb2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE