?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
Static task
static1
Behavioral task
behavioral1
Sample
628e8f8d5b806e364b7367159b0e1035_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
628e8f8d5b806e364b7367159b0e1035_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
628e8f8d5b806e364b7367159b0e1035_JaffaCakes118
Size
25KB
MD5
628e8f8d5b806e364b7367159b0e1035
SHA1
138f7a7104e3d381bb2805939502dc43fc14a6e4
SHA256
710ae23fa884bb7d37124698ac3ceb3021e2d6b611849dd83617f3b406bb589d
SHA512
fb2a9426c6d350029290c96346c1b14fc4628768123663ccfa1683c82c3f5eacad2f355b3f4d5a08f2b55f4927a3167450c15c06fd620206fdcf78516951bb77
SSDEEP
768:oU7NyatFtr9XyEuY62JgRynk12SwRoFNKYSpDSGCM:wsPkNkTnGxwyFNKHFCM
Checks for missing Authenticode signature.
resource |
---|
628e8f8d5b806e364b7367159b0e1035_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE