?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
Static task
static1
Behavioral task
behavioral1
Sample
dd50bc268e3e68cf6e2ee4116f6679f8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd50bc268e3e68cf6e2ee4116f6679f8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dd50bc268e3e68cf6e2ee4116f6679f8_JaffaCakes118
Size
328KB
MD5
dd50bc268e3e68cf6e2ee4116f6679f8
SHA1
3443ecac369ea58acdc2f03c08cd60ff85d1eb3f
SHA256
707b6831a5873637cfec2bae6eb15dcb26a94290f435df5db575cec4d3779f40
SHA512
ef6b0b5ee79276f6bf6b74032977e877660e6e087cecc2970f6269acb6945c8f8d2d93a362cc5db6d9f5a6fe256ade0fe47607bb7955d328ec479564672f72c8
SSDEEP
1536:oYAFEcXOCJ7wTJTclsejT2CYXNzBmEcg1Uc33toW4ZgSjvPj8U/:r2EkESj6dzIESqtz4GSjvPwW
Checks for missing Authenticode signature.
resource |
---|
dd50bc268e3e68cf6e2ee4116f6679f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE