_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
62f88c5ee344610c6182ada230a443ba_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62f88c5ee344610c6182ada230a443ba_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62f88c5ee344610c6182ada230a443ba_JaffaCakes118
Size
118KB
MD5
62f88c5ee344610c6182ada230a443ba
SHA1
79a443739ba0d819957b52fd543fa01ec5c05432
SHA256
809c1ae9544f64de8afdb91f579b111519c5107196eae018c125603216c8d171
SHA512
669f32e198c20299d3a46dbcafa6784e479e9113bcdaf3ac39d2c4aaa24ef1b99f9de0cc5c6c1120dd6fbed619b6f2c5a7c478ee5de62b9a6fbfa7689d27b8f6
SSDEEP
1536:0CeQ/Uvkeb2nA+fOsw1pDTNP6+sSPFeK4L4hBAtayRvnouy8FKmM:uktM2nlOl1ZTV6+tBAtfoutAv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
62f88c5ee344610c6182ada230a443ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE