_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
4cb120ada7c4b843e2bcee526a9966e9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4cb120ada7c4b843e2bcee526a9966e9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4cb120ada7c4b843e2bcee526a9966e9_JaffaCakes118
Size
136KB
MD5
4cb120ada7c4b843e2bcee526a9966e9
SHA1
08a690619226e43c1c17b8075bd17a0d1066d949
SHA256
e07db56f8e236bb346c77b9abb1082b293dd18063715419c1ea9e446dc5c18d6
SHA512
c22ca0571944edb39e3624b9ac60beed6ba2a2eac813edd209558c199851c1b00cd846a64bc359541cc2a61b540dd3e68d56341c62757676d4e0c5797d44ff04
SSDEEP
1536:bgKH+jZYz2/MEkLvgOlNjNxfcFwsN6wqDO8LK8+GZJnouy826OGnJy:nH+cS7O/jWD8zZZout26OG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4cb120ada7c4b843e2bcee526a9966e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE