_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
b9a4f2bfceb9c340bc7316b4149a4472_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9a4f2bfceb9c340bc7316b4149a4472_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b9a4f2bfceb9c340bc7316b4149a4472_JaffaCakes118
Size
136KB
MD5
b9a4f2bfceb9c340bc7316b4149a4472
SHA1
8fb4685b84cb4bb2497ab51ddd3f2ada3e55acd0
SHA256
d17fb19d0539525f2df5098f9fddc4d982ad24d9aa91c1299dd6dc6db9a4a377
SHA512
7c0277837dc2b611be2633c6c1126a4075d24a17b1f6fa8641cf63bd87cb62daae596ac0094ba62d44d65e30b7de8892d1e3e25b5dd37a818772bacade5980df
SSDEEP
1536:njTYJUKFc3LpYyfgjAQDloYFMx/cyQsDh7K8AJ6nouy8B6OvM:AJjiLbECYFWa8iioutB6Ov
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9a4f2bfceb9c340bc7316b4149a4472_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE