_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
b1d593e76960692371bfa127ce207228_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1d593e76960692371bfa127ce207228_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b1d593e76960692371bfa127ce207228_JaffaCakes118
Size
118KB
MD5
b1d593e76960692371bfa127ce207228
SHA1
e1d10f0d475f5154ba306e5f477317b0740759b9
SHA256
f2173f6bbe14e78ec3e0eba32d456d51a84c2d6663e72823a0098dcc2e3b4b1d
SHA512
41adca045f7adfdde80f935f5d96e8e714180b396b5428bed4fdc3a564811f2c676634af247e284cf7194b7ac7cdb1ec261b82d014b23932c377a463c4653f02
SSDEEP
1536:JCDDS7LFiLjnavBSsOnOonMaPJtSNBeAt+3UEnouy8wfm06g:yIFYjnav4bnOAMaWeAt+3U0outa2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b1d593e76960692371bfa127ce207228_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE