_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
ff629748f42837a9dc2812e4291be4f8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ff629748f42837a9dc2812e4291be4f8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ff629748f42837a9dc2812e4291be4f8_JaffaCakes118
Size
111KB
MD5
ff629748f42837a9dc2812e4291be4f8
SHA1
639e45d5f1d0f6c1d5540493265b7ec038e66e0b
SHA256
0840c04237c0b2dfb10e850568d1f024d44148c9f59c251b329f4a745788139f
SHA512
3e5bbe9aa0264d64c2bd8706fecad1de31acd3f8f9f8317121296ab6460d70247c2e33cfd61ed749e1c86444928b0f8dd669191cccb3ff190c23688458e4f406
SSDEEP
1536:S8jtlPxwPTK1uWNR7eHDS57V7sXU9KwM9b8YRBH0xoKoIGj542Hf8FG9A:njXP6TK1uj8V7sXUyuoIGjd8FOA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ff629748f42837a9dc2812e4291be4f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE