?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@16
Static task
static1
Behavioral task
behavioral1
Sample
76d8d1676fd4f4007f9c2975fc30dfe3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
76d8d1676fd4f4007f9c2975fc30dfe3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
76d8d1676fd4f4007f9c2975fc30dfe3_JaffaCakes118
Size
30KB
MD5
76d8d1676fd4f4007f9c2975fc30dfe3
SHA1
8900e812169e12d4bfc2f49e50be84cad49462ee
SHA256
0d6c2ae43372619dedbe3d2733f68c25b081daa6d98dd2c751a86cf6f058fc16
SHA512
3eb4fcf76aa06839e6480693db8a874a9e972d1e399c41bcb0cce1d2ac382280a2fca24987edcc283794712a8b4aff6cc6d8232704c4236c93f538624e817821
SSDEEP
768:Z3GLlMgiK5DKq0Q7bKCJVy+keny5varPL:xGLlNiK5x7KyknarL
Checks for missing Authenticode signature.
resource |
---|
76d8d1676fd4f4007f9c2975fc30dfe3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE