??0CTranslib@@QAE@XZ
??4CTranslib@@QAEAAV0@ABV0@@Z
?fnTranslib@@YAHPAD0HHHHPAUHWND__@@@Z
?nTranslib@@3HA
Behavioral task
behavioral1
Sample
3bd07d32e6e9c6114da8740eda6f6ce6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bd07d32e6e9c6114da8740eda6f6ce6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3bd07d32e6e9c6114da8740eda6f6ce6_JaffaCakes118
Size
180KB
MD5
3bd07d32e6e9c6114da8740eda6f6ce6
SHA1
3056f5240b49290da8ae436bffec111a47d2ca34
SHA256
d3212a1567e4f71cbeba9b0f149159b3992c6c5cfc8001cd325bdb4c0c16e3c7
SHA512
22e6c9625e673f487f9016d6d424a94a4f40af7551efbccbff812eb4cbf4132f309c24ef0f6a41ea60fcc291e8e94a1197bc4079d982c7cb42d2c642e8d2b3aa
SSDEEP
3072:TL1d3QrHovkx9OdUKUJeAfPsClP++f6//CMMMMVMMM07wnoL44:/neHo8PDlK//0B
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3bd07d32e6e9c6114da8740eda6f6ce6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??0CTranslib@@QAE@XZ
??4CTranslib@@QAEAAV0@ABV0@@Z
?fnTranslib@@YAHPAD0HHHHPAUHWND__@@@Z
?nTranslib@@3HA
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE