ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
4b9ade4f59c78c7e2baa88f752429cdb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b9ade4f59c78c7e2baa88f752429cdb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b9ade4f59c78c7e2baa88f752429cdb_JaffaCakes118
Size
712KB
MD5
4b9ade4f59c78c7e2baa88f752429cdb
SHA1
4ce27e098f6d1e6fd9bc9e981b72425241c2c977
SHA256
01f74bd86bba7fddd17597c6648e74f5d153036b5b4cb4f537c1e24615562e6a
SHA512
c6e771ac5f33502b536cd5f55d1102021056051a934f815f8874064cb94f168efdaf42a821254ca2a8325fd4503ef64b1bb8e452dc6a9a2088ad4e07aa40f8fd
SSDEEP
12288:EDAtve3+hXpr7F5XiR5ve4cr30ZqmDGOLE1y+52:XveKvSR5Jcr3wqmhLQy+E
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
4b9ade4f59c78c7e2baa88f752429cdb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE