?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@16
Static task
static1
Behavioral task
behavioral1
Sample
8d2aa96fd5f75d97ad717d0ad18ae580_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d2aa96fd5f75d97ad717d0ad18ae580_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8d2aa96fd5f75d97ad717d0ad18ae580_JaffaCakes118
Size
356KB
MD5
8d2aa96fd5f75d97ad717d0ad18ae580
SHA1
7ce906224978cb22e866e6a593692d596b10c19f
SHA256
667d1230aa4ac7190f9e2d8263bf35b57db4f4cf07e2f1311e43777a3b18a35e
SHA512
0936728fb077cae562be369456507c71d0bc2857c5433a6633f7534313dacac6a91903ed7fd45385af86ea85262ea3c7023af8841adb204107dcc7d7716b2a86
SSDEEP
1536:flH4LnspBdhA8kXFaXHW1aG6W8oqtoL7D5lJ4vI6lUu2kPuGyNsYonZNRsPCYCSX:m2zC/xndlJ41WyYSRpM/b6A
Checks for missing Authenticode signature.
resource |
---|
8d2aa96fd5f75d97ad717d0ad18ae580_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE