_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
fb84fc9e17d966409adf0d343efbe9d4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb84fc9e17d966409adf0d343efbe9d4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb84fc9e17d966409adf0d343efbe9d4_JaffaCakes118
Size
118KB
MD5
fb84fc9e17d966409adf0d343efbe9d4
SHA1
281acf3c11d44878d494d3e287493b673acf2453
SHA256
7abf175a468f80f45a7215b2c6d3a1ed85956b944ec1c4023a159770bddd43a3
SHA512
2b050a170fb3d62051b44fb1292b7a1026e223fd2120e840c60551e259ccf9cce417febc3b88b2c922924d9a30f8993da60704fcd0c2f3a8ee22b4b82fb89764
SSDEEP
1536:F8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:oIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fb84fc9e17d966409adf0d343efbe9d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE