ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
82b497db83e27e269da9bf9ecf1e388c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82b497db83e27e269da9bf9ecf1e388c_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
82b497db83e27e269da9bf9ecf1e388c_JaffaCakes118
Size
630KB
MD5
82b497db83e27e269da9bf9ecf1e388c
SHA1
71c5467257f44474d13d656dff770efdf4af6091
SHA256
a95b607a09caf6bd0e36cede781869dac55d5a309142ad14d58e39a765c8aa9e
SHA512
d6f94fcad99f8211259a36cdad1b8dd1479247c40a2c8f122965c676651016ac42132ec39790ee749f33b2201093c15dd0f03a60b8e3a34f39ebec2e5451c153
SSDEEP
12288:MD48aMMsKS9BAXjhkTMyWt4w/ui5WCLjNBNm:MUSMsL72qMS1EWajM
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
82b497db83e27e269da9bf9ecf1e388c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE