_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
45c050e4e92026801d419705aea1ccc4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45c050e4e92026801d419705aea1ccc4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45c050e4e92026801d419705aea1ccc4_JaffaCakes118
Size
118KB
MD5
45c050e4e92026801d419705aea1ccc4
SHA1
4b95ad91dca4dabfbf38f590a7fec1eb95976c80
SHA256
91c35b740a677590def9948aa520a38bce1e102bbbb950cccfbf7fbf126e50a0
SHA512
1e7a46fd53aaa0b85162655e46e0fc08683e5b2e86512a829719e8039ae6914f8cc9eadff1a1782b7b0ba94cc813bd2856c3249fcc62319afeaafbbed61c7e6b
SSDEEP
1536:x++C5VAwYMvza4xesRFbv1LigmAWgPkMDgzAtqxSnouy8MB20muR5:gYM7a4kgttLBrWgAAtqMoutcyuR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45c050e4e92026801d419705aea1ccc4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE