_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
74d0b72c46ecd4e987366f36172a94bc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
74d0b72c46ecd4e987366f36172a94bc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
74d0b72c46ecd4e987366f36172a94bc_JaffaCakes118
Size
111KB
MD5
74d0b72c46ecd4e987366f36172a94bc
SHA1
a4249b5077f7c3ec29113b2016ba9450ded779f1
SHA256
e1e1a714a64ebf889daaac0e0edb713566885f994f374b2bcfcc29d46ffbd7fb
SHA512
2bf88d4bec08e2b1bd5180cb2f0827b91da7046b916dcca42621153b66d3b56c17ad6a38f662cced4b0353f165f87de46a52fc7a646a62d718db031b99add292
SSDEEP
1536:y8jtlPxwPTK1uWNR7eHDS57V7sXU9KwM9b8YRBH0xoKoIGj542Hf8FG9A:HjXP6TK1uj8V7sXUyuoIGjd8FOA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74d0b72c46ecd4e987366f36172a94bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE