ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
048e3ba9b538366bf5337407277c32bc_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
048e3ba9b538366bf5337407277c32bc_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
048e3ba9b538366bf5337407277c32bc_JaffaCakes118
Size
616KB
MD5
048e3ba9b538366bf5337407277c32bc
SHA1
caca8d63cf830b28f987381619ed6814abec8e4c
SHA256
930b00ef60f45490a7af1db70b38756375cbd9c05fc7050d71bb9e254090112f
SHA512
55fa1f881ef1e89b6dcd2f080dc7ab252c8c308295dc32b76e5eed891d6a1c6d8f70d975dabbefdfce93f8ae453e75df0d351f798f9295eb4c25fe63062f95d1
SSDEEP
12288:ctthbfw/VbEJl7ogyCFTo4Vh3ymoSqBecN8UjVNczruH30bBPDj5KU:ch7KVbEvMpCNliMVUmd
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
048e3ba9b538366bf5337407277c32bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE