_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
88b9faa198a3955bc37fb8fe4b4837f8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
88b9faa198a3955bc37fb8fe4b4837f8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
88b9faa198a3955bc37fb8fe4b4837f8_JaffaCakes118
Size
118KB
MD5
88b9faa198a3955bc37fb8fe4b4837f8
SHA1
9d6083da479dcbfac56467cc20f2bac77a0a1bdd
SHA256
e2b0af4e995957a5cc1f5f1bf40b2f0bf8fe2723afd11cdecb0baa0ea6a9adef
SHA512
fe87abf264221c64ffcb2c30cb52c4722e4be97fb5072820dfa05f00403f25ab674235e3f9d19981304c48e7ce047427607f4b911ee1db32aa18e3e94d895df4
SSDEEP
1536:TCDDS7LFiLjnavBSsOnOonMaPJtSNBeAt+3UEnouy8wfm06g:IIFYjnav4bnOAMaWeAt+3U0outa2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88b9faa198a3955bc37fb8fe4b4837f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE