_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
df282b3c04e8b1aa95fc81071a0358be_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df282b3c04e8b1aa95fc81071a0358be_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
df282b3c04e8b1aa95fc81071a0358be_JaffaCakes118
Size
118KB
MD5
df282b3c04e8b1aa95fc81071a0358be
SHA1
96a6c655574705d4382018bc1f9c92d246b031b2
SHA256
094f38ed8fc06016350000f71a6c610165b02cb789af84e3337e4a4d9bb6e8e3
SHA512
edf09cc884e544e0ac7b780b7943ebc52b4f6baca3b0292d521d270467684ba2d83dbed58efc38afe2d0410efadaf16b99d71b5b890465a24ed4efe6dcd9384e
SSDEEP
1536:68DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:DIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
df282b3c04e8b1aa95fc81071a0358be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE