_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
e00e7f40106226ec3cacb7ed4fbea8de_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e00e7f40106226ec3cacb7ed4fbea8de_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e00e7f40106226ec3cacb7ed4fbea8de_JaffaCakes118
Size
136KB
MD5
e00e7f40106226ec3cacb7ed4fbea8de
SHA1
9e120d8c509a7d3eba45dc97193be49c154651c2
SHA256
cff9070c3a6e23e8d49170bbc3d5c698eef872ff645e5240e5d5015aec2f9eec
SHA512
5eeb296aada110141eec3f2524c235aa3391ccc42d5a30c6f59ae6885d4dd9cc345e76b06fc7257afff51b294fb5c6a060f37620f2d56200bdb611bdb14b821e
SSDEEP
1536:QgKH+jZYz2/MEkLvgOlNjNxfcFwsN6wqDO8LK8+GZJnouy826OGnJy:IH+cS7O/jWD8zZZout26OG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e00e7f40106226ec3cacb7ed4fbea8de_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE