_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
ffdb27f7902e4518c57245e341c12647_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffdb27f7902e4518c57245e341c12647_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ffdb27f7902e4518c57245e341c12647_JaffaCakes118
Size
118KB
MD5
ffdb27f7902e4518c57245e341c12647
SHA1
c5509e541e1bc7f8e3e63eb78d43cfe29cbec48b
SHA256
86416afaedf37ce968f374c86d2565ed680fc8c203d860c9c9f048a90c1638ef
SHA512
6aedded758acffdb7184a8d0a5e3dcff65203a3c8656951e8d0219d4186273c5d5e0f8b2e9e506e1302622516957e61aad2181aa6c81aeeca377a94e9f248fb5
SSDEEP
1536:WSDDS7LFiLjnavBSsOnOonMaPJtSNBeAtjF4nouy8QfG06g:lIFYjnav4bnOAMaWeAtSout6W
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ffdb27f7902e4518c57245e341c12647_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE