_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
ffc57c7fa922df612104eab938829f1e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffc57c7fa922df612104eab938829f1e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ffc57c7fa922df612104eab938829f1e_JaffaCakes118
Size
136KB
MD5
ffc57c7fa922df612104eab938829f1e
SHA1
5fdf7499f117bb47e91fb79303b51a0859e91c68
SHA256
df12bf02982ae95baff496d232b5cfe32bdb7056168b78c5470c392ff5d51d11
SHA512
2a6154d1f6cfb8428bf6b538cf972b11e0fcb7c662867081093690c6ed8a4d2a55f1331778b4e822bf85d8507588752154cf61063f8ffba1e9f6afde5810eacd
SSDEEP
1536:YgKH+jZYz2/MEkLvgOlNjNxfcFwsN6wqDO8LK8+GZJnouy826OGnJy:AH+cS7O/jWD8zZZout26OG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ffc57c7fa922df612104eab938829f1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE