ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
5d2e63dbf6e3ed2304ea52944617a91f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d2e63dbf6e3ed2304ea52944617a91f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d2e63dbf6e3ed2304ea52944617a91f_JaffaCakes118
Size
521KB
MD5
5d2e63dbf6e3ed2304ea52944617a91f
SHA1
60a7cb9f309cb47c847e81ee5fab4782793d25a6
SHA256
a38ec7dcb6f0d17334156f41e18d06090d90ea723decf670b6d8324e29f793b4
SHA512
ea940d1485d343b9ebe3d63fe88d6f631beb6cfcff6037d30c18619499189c295a01685721d9aa57f1f696b24a5c4fff13ba5863b2b5db6662bf7e69a0fc7a00
SSDEEP
12288:04JE0t+khqGj9PRjEhb6YmZLAoWlZGEiXIgbz8iOGa0EQ2jHSD:F2zkokDW6DZ2lkXZbBOGa0j2jHSD
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
5d2e63dbf6e3ed2304ea52944617a91f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE