?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@16
Static task
static1
Behavioral task
behavioral1
Sample
ef6b45afaa6e37a7825f2d66168d77d5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef6b45afaa6e37a7825f2d66168d77d5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef6b45afaa6e37a7825f2d66168d77d5_JaffaCakes118
Size
356KB
MD5
ef6b45afaa6e37a7825f2d66168d77d5
SHA1
72b38b5c0cd71fa541dd8c25ab21a9be92baff65
SHA256
cca90f3d8c29d6ad4494eadd39cba4d8d4a3db6755ca3ee7201d8e1a78801a9a
SHA512
ba522a2fc3ee56917dba1f25bb49f8ed5c9b1e78a9acead014efac5ee2ddd011e88756bb1fbaeae4cb3968eb4341b371d59ed1b67664fecde9fc30f96f42c08f
SSDEEP
1536:clH4LnspBdhA8kXFaXHW1aG6W8oqtoL7D5lJ4vI6lUu2kPuGyNsYonZNRsPCYCSX:X2zC/xndlJ41WyYSRpM/b6A
Checks for missing Authenticode signature.
resource |
---|
ef6b45afaa6e37a7825f2d66168d77d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE