_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
3080ba126b7973eddbb75f2628166362_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3080ba126b7973eddbb75f2628166362_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3080ba126b7973eddbb75f2628166362_JaffaCakes118
Size
118KB
MD5
3080ba126b7973eddbb75f2628166362
SHA1
2db287b19688018a6c171a9b8030749760ff1e30
SHA256
c81c12515c1c674a02d76826fd2146946435a5966f0b203eb66cc17bcb8d0468
SHA512
6bbeecea7edf2193e4fd1f38a0e42761542da203d035f39a83446fe46f48c673fa084cd719c422e5f95435b7dcae440ea5c359941016768a3b9eff01ae74e60c
SSDEEP
1536:bI2tekbEM2Y9CsBoZ8DKPPssOBG52Atmtnouy8z6DU+:HQdM2YEQoZ8DWF2AtmVoute
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3080ba126b7973eddbb75f2628166362_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE