_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
f5427d3c0d4b25660c4b8555e1601c93_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5427d3c0d4b25660c4b8555e1601c93_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f5427d3c0d4b25660c4b8555e1601c93_JaffaCakes118
Size
118KB
MD5
f5427d3c0d4b25660c4b8555e1601c93
SHA1
25469d749acadfe08744caf61dcd84e0beeabf35
SHA256
6e59586164372b2df9ade2d4067e8ab55bbd34b653d9253b7145fadfc9e94ab1
SHA512
8806f643d57f1d7642cbb9109130b2c6b6715c49ae23e532c854ee950170dad4559a65b589d89fca64ad305127e3d035a59fe16f789ee46b7a57960166c9df04
SSDEEP
1536:pbDDS7LFiLjnavBSsOnOonMaPJtSNBeAtUsQnouy8Jfm06g:FIFYjnav4bnOAMaWeAtbYoutZ2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f5427d3c0d4b25660c4b8555e1601c93_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE