_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
cdfcb8482dea366655ab7a6510e38b95_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cdfcb8482dea366655ab7a6510e38b95_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cdfcb8482dea366655ab7a6510e38b95_JaffaCakes118
Size
135KB
MD5
cdfcb8482dea366655ab7a6510e38b95
SHA1
13bed94301f5e02ac400e53cc1e6366ecc20e234
SHA256
132faa0a540eed4da22938aa67d2960125f9c7f7e047b5238e26ef45b630caff
SHA512
dad779162dad95b361a109c182c58edf4afd9f82853d0a4ac7a8e270c0f6335ee2a8b1e2747ed888038f43e484a4d16a792579408a8c3fccbbebea8ebc1c8647
SSDEEP
1536:SNDX58zc+BwWarTdNFiHnhuzGjmplPnmeKk+iUnouy8tz4RiRM:SB5n+eWuMnECjOnmVkdkouttzcm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cdfcb8482dea366655ab7a6510e38b95_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE