ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
032a2202b150ed565b133e8f61ec69a5_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
032a2202b150ed565b133e8f61ec69a5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
032a2202b150ed565b133e8f61ec69a5_JaffaCakes118
Size
583KB
MD5
032a2202b150ed565b133e8f61ec69a5
SHA1
5609421a57f7e5d6c6c4fe125ff69e928ed6ac67
SHA256
cba612170f03751dfb796aada79752101883759467c4d3cbab249652fc28916f
SHA512
667c5bfce88c3fbb20f969cf2c87cb40320a4c09b6a760a9bb5c3cb45a3c0ac4acb9861375e9a08ae6bbe78176a42c2453d4ef16018a49b0e4b819c0831cbf44
SSDEEP
12288:5VCfSGoo7b+AqRgDYOowIsaCKGajvrhehsNB0EQ2jrJH:5VCfE6aAqRHdsHKGa1ehs0j2jd
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
032a2202b150ed565b133e8f61ec69a5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE