ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
0d6198a81e5ec70c89c106d58880e2ca_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d6198a81e5ec70c89c106d58880e2ca_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0d6198a81e5ec70c89c106d58880e2ca_JaffaCakes118
Size
712KB
MD5
0d6198a81e5ec70c89c106d58880e2ca
SHA1
c76b62d1e007a195c1372a1d7608d75e4acaa9df
SHA256
33b4ae136022e623d3841a476cc6aee7bafaa8359f810805d6388f95323b3d67
SHA512
0e90856f1da59313a1062cda433fa67e12ab532f9d89bbf55802438c3f943ada59575dd5d2b76f53e9e96f0ffb8bbb80baafcea07cd7c36b2cb79e472d48aac1
SSDEEP
12288:EDAtve3+hXpr7F5XiR5ve4cr30ZqmDGOLE1y+54:XveKvSR5Jcr3wqmhLQy+O
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0d6198a81e5ec70c89c106d58880e2ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE