_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
f53e57c54cea10238b732b49946c569c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f53e57c54cea10238b732b49946c569c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f53e57c54cea10238b732b49946c569c_JaffaCakes118
Size
111KB
MD5
f53e57c54cea10238b732b49946c569c
SHA1
8194d7da6d8d8dc9f81f6a43367cdcb582054918
SHA256
61849e761eb4fde90ae32f950c66f4a10174db91e2784ff0a07811cf10ae99eb
SHA512
b92874553665e11f9c663ac879e2b0c07b153297e4263c577280885657a8557917f708e6c8a7d9b29c02e0b34e8f27afd3f45f92681abc1dc9083e391ca89cb8
SSDEEP
1536:BEbMs6DZ8vp2f89uEYFHlbnt0DfCEfyHHe7EgUOhCSgo44bO8bDs7oV:BsMbF0Wk7fyn8CKbD1V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f53e57c54cea10238b732b49946c569c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE