_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
ebdb272a4ec8687598af1daa602a6473_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebdb272a4ec8687598af1daa602a6473_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ebdb272a4ec8687598af1daa602a6473_JaffaCakes118
Size
136KB
MD5
ebdb272a4ec8687598af1daa602a6473
SHA1
afab1119ba34cfb369f522d43b6d15a446bc85a1
SHA256
e8322bafde7ac86804d4d657b852f34cbb245bbf1f8bde2a66560f184ac0987e
SHA512
b3c2d622fd8510547c15ba325a0ee9af21f8ed50ac1429cd634e5fea96b26215020bed8e2660bab3099bdf4dde86ce89965e6fcaea1b84b6941673ac12c789d7
SSDEEP
1536:jgKH+jZYz2/MEkLvgOlNjNxfcFwsN6wqDO8LK8+GZJnouy826OGnJy:/H+cS7O/jWD8zZZout26OG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ebdb272a4ec8687598af1daa602a6473_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE