ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
370e8b8d8e0ea95ea3d9681c553d4cb6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
370e8b8d8e0ea95ea3d9681c553d4cb6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
370e8b8d8e0ea95ea3d9681c553d4cb6_JaffaCakes118
Size
572KB
MD5
370e8b8d8e0ea95ea3d9681c553d4cb6
SHA1
4a5d22ea257860fe078e4e0bc66a8815d9b42fee
SHA256
e565793963e49809088e086270512cd992483b4e8af1fcb704a0aa6e3d1d3c13
SHA512
2d70176fd506c4a6b7906058b5ae34fa67fa9b2cb2902403339f5d062559070402150210daf6db703e7c5b1c97485422b6034b9b257e098e7015baab9a43b740
SSDEEP
12288:IZa4BeZGpmJ1aDuV+77hrARPhvKJwsAMF39Ib8rozbLCqP:IgsejTXY77i3vXMFSb8vk
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
370e8b8d8e0ea95ea3d9681c553d4cb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE