ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
5dc13394c4d06df474abe3c7807adb20_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5dc13394c4d06df474abe3c7807adb20_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5dc13394c4d06df474abe3c7807adb20_JaffaCakes118
Size
1011KB
MD5
5dc13394c4d06df474abe3c7807adb20
SHA1
3f08f473e11099276bf48b6bfcfa305b079f8405
SHA256
0e061386987d35a918bc3a7a6b28ea42bced5895f5c994162cdb1d67131bcf18
SHA512
39edf9e89584ee6591e2242cb21c3dd53155e30d9c27f2c73cb69ad85fefc84b4f2cbfe4c9fa2eef67d9399d6a300124657a33b3087f4db93ffc704936a5142b
SSDEEP
24576:ZTmgWjD3SUnT/UxNJuxn9ULobfOXNBgwkt+6RRjFMd0j2jBP:ZSgaPT/UPhcS/kt+sRBM0jm
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
5dc13394c4d06df474abe3c7807adb20_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE