_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
a17dc935dc287afeb28fac7a1859feeb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a17dc935dc287afeb28fac7a1859feeb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a17dc935dc287afeb28fac7a1859feeb_JaffaCakes118
Size
118KB
MD5
a17dc935dc287afeb28fac7a1859feeb
SHA1
845b0f7976405a94bcf16a14f1d5dbf13b9fcd5e
SHA256
ed492b72578e13685482c7fcaf11317a7e71f60dbf5add409cf518f2cad8ccea
SHA512
55ef60bc26da72d7b7de72331f7d8a6a45c32b1ce61a724c1b5cde41428dd5689ee3d2565916d7246b85435be8fc8750603df88d2a0efa890472f96b5061684e
SSDEEP
1536:C8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:bIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a17dc935dc287afeb28fac7a1859feeb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE