_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
d5938917882d40d3c2e873496c3e952a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5938917882d40d3c2e873496c3e952a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d5938917882d40d3c2e873496c3e952a_JaffaCakes118
Size
118KB
MD5
d5938917882d40d3c2e873496c3e952a
SHA1
6a64bc96c3bef57dc95b487a600afdb33fe5dd5a
SHA256
4683d91446caab2c4c32f1097a3a93beb87725260d90d57a1fe0433aef9be4eb
SHA512
257a01ff49b22f3e7c5ccf50c97713814d42caddb4308dea47c7641e0b20da061183877b02e3577ed1487ff30a2cf5b7bfc354a2ece4eed5b5be354d72a87010
SSDEEP
1536:B8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:8IFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5938917882d40d3c2e873496c3e952a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE