ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
311cd74abfd2dac3ed9456af84b5f292_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
311cd74abfd2dac3ed9456af84b5f292_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
311cd74abfd2dac3ed9456af84b5f292_JaffaCakes118
Size
664KB
MD5
311cd74abfd2dac3ed9456af84b5f292
SHA1
6ec2bba56ee7200ab92bbf413206ed3d24bba905
SHA256
d74b189ae40336d3a5692933c6a1108d3751c1b10a234538bce79dee998d5a05
SHA512
363b02e808334224e0404957973c3f9b767214aa2d1e1c6c95031b35264152dc1214e9b423e9d9627921bd2c5ec2415c9f7adbad98fb6cf8ba8865178a748ac3
SSDEEP
12288:2si5g4y9f2QPRmxiDozjLst4kY/P5+YuaVaYlIALrDbzeZ5ea4HMe:2mxFT4jP5+titlJrDWx4L
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
311cd74abfd2dac3ed9456af84b5f292_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE