_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
ad16ce9cfc740b5ab5bff4fc38e9f2e6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad16ce9cfc740b5ab5bff4fc38e9f2e6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ad16ce9cfc740b5ab5bff4fc38e9f2e6_JaffaCakes118
Size
118KB
MD5
ad16ce9cfc740b5ab5bff4fc38e9f2e6
SHA1
0ba6452c53336d809a062f082550de916136614f
SHA256
81f2fa13394e4074bbaf26e809d54ebec364e3bc7b950516fcf1f92f4a9e9184
SHA512
581af666c399c063168cb2e945212c1a9cc591020f71f6c0da3fd16947c0698ecfe16089baa2f96aac93544406539b6d94e1bcb7b39eaa3108f2307690dbbcbc
SSDEEP
1536:D8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:WIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ad16ce9cfc740b5ab5bff4fc38e9f2e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE