stopwork
work
Behavioral task
behavioral1
Sample
fe305fc5239aa7d8d2adac38e97edce8_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fe305fc5239aa7d8d2adac38e97edce8_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
fe305fc5239aa7d8d2adac38e97edce8_JaffaCakes118
Size
26KB
MD5
fe305fc5239aa7d8d2adac38e97edce8
SHA1
27c0be8e9e2c0c3a3fcba424f8c824887545939c
SHA256
8c1e0adc0fea5313d774631963d1718380546aa436a3fb6d8b3323b79de2775b
SHA512
441b42ce613667ae5939b5837164db360ccb6a95fcec25a34556275cc9467373744a8f50a64dc257c7c22e2aeedaad42d97f78a1f3794fd3ee8bcb66220ae87b
SSDEEP
384:YPAL9bl45o1wYovEpn4tJXAq+zHJXFpmVIEzHBwDbWCciC++prgVIAxer6+e9PfW:YPMJzn4UHzpmumHBwDCCcijiAxRha5
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fe305fc5239aa7d8d2adac38e97edce8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
stopwork
work
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE