ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
04c3965dfe229ea016b1771eca09532f_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04c3965dfe229ea016b1771eca09532f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
04c3965dfe229ea016b1771eca09532f_JaffaCakes118
Size
558KB
MD5
04c3965dfe229ea016b1771eca09532f
SHA1
472c193c5791a01687d438f511ed9d35d2c474b6
SHA256
ca47f076e732481b75f4c60fb5a1f5ac3962295011e9d97711b2569f5d0dcfb2
SHA512
554860824336b7745bbd465311d8608dc86d3a2c44b6ab2fe99a8460ddf49c9992d8e0a620f3b84ab3b82d17b180717611000568fca8a51e99965e73b57324cb
SSDEEP
12288:Ph9nmJMIx5SUjTZifC/Nw9RxgyByTrlXSk/xaNrLEwX9Yq:POV5djTZiq/axbBGl9kXKq
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
04c3965dfe229ea016b1771eca09532f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE