_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
484060dde810422dcdfc72d48350e877_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
484060dde810422dcdfc72d48350e877_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
484060dde810422dcdfc72d48350e877_JaffaCakes118
Size
118KB
MD5
484060dde810422dcdfc72d48350e877
SHA1
06997f8a8bcae271b608c48d7847c640864383e4
SHA256
8c4d1ca9bec1c71d3ee224906def56d58bc331b556d54d913cc974d824f68d5f
SHA512
c579f021328124f77170977204c91a61be07e541ab7430adacf2765ae7cd85640edd9e2c1378ee06f9e22528169b2768fdaf813b0b6f3571a33fdf019c5c2277
SSDEEP
1536:v8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:aIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
484060dde810422dcdfc72d48350e877_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE