_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
4599eb5450b1a4e373aa5cdd08420245_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4599eb5450b1a4e373aa5cdd08420245_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4599eb5450b1a4e373aa5cdd08420245_JaffaCakes118
Size
122KB
MD5
4599eb5450b1a4e373aa5cdd08420245
SHA1
c91c8aa0fa440d2c6fefc14ae176ca11c75f1320
SHA256
e1ffa36c0246bbb8cd8272e56c4c0adba7fea85dc47c70bd76d57bbb087e7fd4
SHA512
124fdca6e91f49497e477d0fa5196cb1b70f165041a1da25853e6eac96ec9348acce167ffb0b43fb7c488aa02b3a062bd2ed3258470485a171347bc4604297f8
SSDEEP
1536:8tubDUw3lbQ0zTjb6CuI/CI+33gmv4YZSAjbqsbxI5yXnouy8dROQ:YcwooH33gmJb7tIyoutDOQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4599eb5450b1a4e373aa5cdd08420245_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE