?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
Static task
static1
Behavioral task
behavioral1
Sample
effd459bca2646473b80463c4c8c49f6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
effd459bca2646473b80463c4c8c49f6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
effd459bca2646473b80463c4c8c49f6_JaffaCakes118
Size
25KB
MD5
effd459bca2646473b80463c4c8c49f6
SHA1
28e86d111adafc411921c8287c1bd91ba5d8f685
SHA256
19241c09fb191679e8a673582ca78fa87c92ccb1e8f9126a275a3fd4d4cef3b2
SHA512
1cd978efe25c5523142222b8326f7efc0ac03b202760d2d8d2628641b4e12e6b02fe1b92c00550a0cf942f3f0711a82c8b96584590a28879005bd01395fcaabb
SSDEEP
384:Kc/Rdt4KkVRU48hLzqy5iGzOylG4KvlMNB63FZLfmo6NLPt0q8qYpOCHKpqM:K2kVR8Ou4F1P6Njt0pqYpjHKoM
Checks for missing Authenticode signature.
resource |
---|
effd459bca2646473b80463c4c8c49f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE