_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
dbb576b0be0cb9163393980bf190038a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbb576b0be0cb9163393980bf190038a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dbb576b0be0cb9163393980bf190038a_JaffaCakes118
Size
129KB
MD5
dbb576b0be0cb9163393980bf190038a
SHA1
3441462ab581a1ec5c594f153b2e218bc773f89a
SHA256
4b997053c31b4cc2a3197f2785bb694adf770de76a3452987adb3d3c95161ed5
SHA512
72ec4ce350c2f08ca15ab3f2ee19372bc76ef17bfdc314a32c3d8387ef2c42e7b1ff857c1b8cf11d1c44e4ba79143f92cf33d4947429ab304ce89ed200df7e71
SSDEEP
1536:0paYJvQ/uMc/JgAkO/Ft02r50HQvKkxsnouy80aVg:OJcuMc/Rk6FaU8k2out0au
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dbb576b0be0cb9163393980bf190038a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE