_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
cf97f3b78fdf453d0373d9c7f9dffffd_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf97f3b78fdf453d0373d9c7f9dffffd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cf97f3b78fdf453d0373d9c7f9dffffd_JaffaCakes118
Size
111KB
MD5
cf97f3b78fdf453d0373d9c7f9dffffd
SHA1
839dcdf0acf5d64b48b46afaff31bc6a7e76c607
SHA256
5f485bac564cd8834f2ad8a6dc84ef1f4ab2e1cd138f00d66d0a5c3a00757d44
SHA512
f256328e37996bbb92d9a3c712600c414313f5d912a11b5368afb16ce46f5fcbd657624f02898d1d38f49030d2a038f6deb101de5e9e52169648409390dee98e
SSDEEP
1536:qZFUCATS4mfJKHXWRNaw59dbDgL8ItRKiMRRYSTqD4Ip:q4bVKqKPYSM4c
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf97f3b78fdf453d0373d9c7f9dffffd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE