_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
81d6fdec675ca9cb47ab3ae407d5cada_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
81d6fdec675ca9cb47ab3ae407d5cada_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
81d6fdec675ca9cb47ab3ae407d5cada_JaffaCakes118
Size
118KB
MD5
81d6fdec675ca9cb47ab3ae407d5cada
SHA1
33ee4275cc3bf76f335bb288a59de2bd9c65231c
SHA256
185fab4031051494437dcb3ef6fbacb8c7a98fb3bb9a8142869aee7dfb9b77ac
SHA512
3877beb2910582a235ca287bd370924e60230206f4c91b58452b48dad2bcba906d1dd341c5143a4d37fb950b48d87f4cba2f0e6310751c34d031041935462ee1
SSDEEP
1536:tCDDS7LFiLjnavBSsOnOonMaPJtSNBeAt+3UEnouy8wfm06g:WIFYjnav4bnOAMaWeAt+3U0outa2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
81d6fdec675ca9cb47ab3ae407d5cada_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE