ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
9614c3f52ddf5ee73f510f6199c06d1e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9614c3f52ddf5ee73f510f6199c06d1e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
9614c3f52ddf5ee73f510f6199c06d1e_JaffaCakes118
Size
691KB
MD5
9614c3f52ddf5ee73f510f6199c06d1e
SHA1
6a8261944c6b0454e917b0aff0d7e268c6767653
SHA256
86cf546659999116686b3b6c55b77c56b15b6626cf632034153139833aafd8c8
SHA512
c4a6c7a2b919eebea29bd322f943a9ac6d8ec769f0176296ded3dd5bf941186e036838430dce99f43d0ee3b9db5fb10e4118d93edcdd23272ac0fa5f428e72dc
SSDEEP
12288:1gMNIDIBFs5VJGpFjqBDxPQU8/+SV9iztmLfGOTKae1:1g8I8BSotqJx4p2rwLf5TKae1
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
9614c3f52ddf5ee73f510f6199c06d1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE