?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
Static task
static1
Behavioral task
behavioral1
Sample
00b5e5196e998336a6d32dfabb42b393_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00b5e5196e998336a6d32dfabb42b393_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
00b5e5196e998336a6d32dfabb42b393_JaffaCakes118
Size
25KB
MD5
00b5e5196e998336a6d32dfabb42b393
SHA1
19c98e818bdedbab4a6ee33042c1ba0d0a37fa01
SHA256
6ae52cafecbe3c08614e9d083c76d6b4a79ad07822c506f169af9038347b8e66
SHA512
1f2249b5c0ce17c5fb8c6e3524ba86dfb47e636679140adc9c8f57ed85d67f7214cdcfbd1877d9f9c0bc4c2dab05cdc5df6f4f7fb759e242674a2605e809fcdc
SSDEEP
768:xrHFI0/T/ltj9LEPgf2cTeXsulEt8f30MFseM:tHFJ3pLPf2qeXsoFFM
Checks for missing Authenticode signature.
resource |
---|
00b5e5196e998336a6d32dfabb42b393_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE