_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
69ee09ce6ccc571553e3d8851d834354_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69ee09ce6ccc571553e3d8851d834354_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
69ee09ce6ccc571553e3d8851d834354_JaffaCakes118
Size
118KB
MD5
69ee09ce6ccc571553e3d8851d834354
SHA1
b9ee1579ac8a2b41874022fb5a40d3b14fa7c4b1
SHA256
1a75eaf190cefd5d300fc203c64cbf3954564827ea0d17f1c57d51344abf2c79
SHA512
b53a9090d9d2cfc20bb84833340ced256efeae3b3b3578d50258c41d0018e83b5d2703d2df7beb8892442b1648053a27f7ba147e5d73421f4362db3ad6435a88
SSDEEP
1536:r8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:OIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69ee09ce6ccc571553e3d8851d834354_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE