_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
b65ae71c19d5139dd8f9c73a9ba3cddd_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b65ae71c19d5139dd8f9c73a9ba3cddd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b65ae71c19d5139dd8f9c73a9ba3cddd_JaffaCakes118
Size
129KB
MD5
b65ae71c19d5139dd8f9c73a9ba3cddd
SHA1
f27bbd0e996d9321d52a6f2eb2beac53b744729a
SHA256
2e291ee7bc16c9231dbe3db365b03d97ab64ac7eb6f0bea785b588852c4d5dee
SHA512
6181a69d3727cc8709786a7982406c40986f71f9781014a7e9de2d852428c59b9e285688212ae291420c359f217ff11d67505b3651bc27a3e52fd4ef8189a76e
SSDEEP
1536:IpaYJvQ/uMc/JgAkO/Ft02r50HQvKkxsnouy80aVg:yJcuMc/Rk6FaU8k2out0au
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b65ae71c19d5139dd8f9c73a9ba3cddd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE