Fgrewsdfvb
Sdfghjkli
ServiceMain
Behavioral task
behavioral1
Sample
345b3444ec0b6ded6f2ee3eca185d80a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
345b3444ec0b6ded6f2ee3eca185d80a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
345b3444ec0b6ded6f2ee3eca185d80a_JaffaCakes118
Size
387KB
MD5
345b3444ec0b6ded6f2ee3eca185d80a
SHA1
3c4e2ff3cf7bd331ed5863daf3051fe9dd2c8df7
SHA256
99503e2cc6b9163095c41d30aa9ed71d790ee8aeec537e152ac7cd9faf69b473
SHA512
b8ea72db3c9d61590a748c911cecd1b3fb22b2a8d34e52da810c66b6ef78a1b2189fe3010bb32239215c1dc5219e748b0948feaa1c49f4aa3e2dcc8cdb4b3020
SSDEEP
6144:gpytZ4iF2idZecnl20lHRxp3g1+d0t/m/v5YA/s3uEyIPmLq3I9gKTxl+E:c+F3Z4mxxxiI/v5/s3vuLq3I9gKT/P
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
345b3444ec0b6ded6f2ee3eca185d80a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Fgrewsdfvb
Sdfghjkli
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE