?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
Static task
static1
Behavioral task
behavioral1
Sample
602f5664fac59c6ab147b2245e63a474_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
602f5664fac59c6ab147b2245e63a474_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
602f5664fac59c6ab147b2245e63a474_JaffaCakes118
Size
31KB
MD5
602f5664fac59c6ab147b2245e63a474
SHA1
fd25817f317219f63e27eb8f0499c0f284ab68a2
SHA256
c20e1fde17989b4d625b3d503441a807d10ac4ea02633ac8251b9abb76ee43df
SHA512
f7dd36746ab618c8423e0b0f308d013d91ac62b7e1150417cd6b1ebc54abc2cc2ca50765e566a3873ae4d424e0b933d2545a60a009dd753043f73d8281c9fd94
SSDEEP
768:wepujL2aMpr/wjJGrO2HUryjEf2FF5jFvCM1:wxdur/wjJAjHGZ2FLjFvT1
Checks for missing Authenticode signature.
resource |
---|
602f5664fac59c6ab147b2245e63a474_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE