_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
487c7f68ae2a8b35daf1e03cc6be9498_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
487c7f68ae2a8b35daf1e03cc6be9498_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
487c7f68ae2a8b35daf1e03cc6be9498_JaffaCakes118
Size
118KB
MD5
487c7f68ae2a8b35daf1e03cc6be9498
SHA1
92e662ce0cf64fc4371969d6ff658bf541d66e85
SHA256
7146fa8224410def7d5dbe2e3832f60facd252ccd41c5a4f04f26900977145a0
SHA512
24af83185c9c4142fec2d1e8652d20c737cae8d968bd07823c5fff25168c0e5892412d73cf059d8daff2a42e87d88174eee0ce71741629e27bcd07ae86b6a608
SSDEEP
1536:a52tekbEM2Y9CsBoZ8DKPPssOBG52At3Whnouy8T6jU+:NQdM2YEQoZ8DWF2Ataout+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
487c7f68ae2a8b35daf1e03cc6be9498_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE