?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
Static task
static1
Behavioral task
behavioral1
Sample
c8df392992e8234f62e73a3ac224f112_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8df392992e8234f62e73a3ac224f112_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c8df392992e8234f62e73a3ac224f112_JaffaCakes118
Size
25KB
MD5
c8df392992e8234f62e73a3ac224f112
SHA1
93cd4d94093ee310a3c20a792c944b7d816721d4
SHA256
5ab0f0f238435f2713b633dbb6cc461bf702a73753feca04721ef0a8d6ef7696
SHA512
f44a9ebf62733723948f5b5d6586060288c6cbe833e6bdb75e666c22403ff6c808977241c710b05e17772c0a2d667b16599cbd5fabe57087bb8da708f4494a55
SSDEEP
768:zrHFI0/T/ltj9LEPgf2cTeXsulEt8f30MFseM:fHFJ3pLPf2qeXsoFFM
Checks for missing Authenticode signature.
resource |
---|
c8df392992e8234f62e73a3ac224f112_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE