?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
Static task
static1
Behavioral task
behavioral1
Sample
dbea88119b5ccb840ba2484a8fdb8da8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbea88119b5ccb840ba2484a8fdb8da8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dbea88119b5ccb840ba2484a8fdb8da8_JaffaCakes118
Size
34KB
MD5
dbea88119b5ccb840ba2484a8fdb8da8
SHA1
cfa64bff9998d9b299ee3be5226cdcf085b50864
SHA256
e6f6888425e97d752690bcbae8c1a2047ebe5cb3618038f742fca6c76bf140c0
SHA512
590d6452f15554a9b1b4fa77ece6e228e6d45951c813fc2e0d26f7c2a27a05823c18b0f22dd3ab8ca4a6d90d96c76eb5d35b43f0271a703ab872b6a9c6cc5716
SSDEEP
768:BYeO4sEbBZWIeUWSgF65VWrhaWNBiz7uvoEzt5UIb:BYWHWEWSuUmaWNBiz7uVb
Checks for missing Authenticode signature.
resource |
---|
dbea88119b5ccb840ba2484a8fdb8da8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE