MediaLog_Create
MediaLog_CreateVersionExplorer
MediaLog_DisposeVersionExplorer
MediaLog_FindNamedGuidEntry
MediaLog_GetLogPath
MediaLog_RetrieveVersionInfo
MediaLog_SendLog
MediaLog_WriteGraph
MediaLog_WriteSysInfo
Behavioral task
behavioral1
Sample
a5d2a4e1e267cdece7c79bff60f7c8eb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5d2a4e1e267cdece7c79bff60f7c8eb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a5d2a4e1e267cdece7c79bff60f7c8eb_JaffaCakes118
Size
405KB
MD5
a5d2a4e1e267cdece7c79bff60f7c8eb
SHA1
c74b8b30b50340f6598b33075c821c4d7ebdb6c3
SHA256
5911ca8251a1f24bd5c5c6bc4f8216513c3a16bcb41f1d0499b060702b83802c
SHA512
cb166fdbc5325d0d1093eaf4f90d7a27431a1c919fda6239bca52151d04dd413b4a38f0f4c805240780072dabbcbc484f74d367596f63d02e5949f25c5ffcd8f
SSDEEP
12288:iDuDt1q67efy5BvV5vbLsWesVbqWA1CCNHug2BL:iotAGegFbLp9V2nCuHug2BL
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a5d2a4e1e267cdece7c79bff60f7c8eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MediaLog_Create
MediaLog_CreateVersionExplorer
MediaLog_DisposeVersionExplorer
MediaLog_FindNamedGuidEntry
MediaLog_GetLogPath
MediaLog_RetrieveVersionInfo
MediaLog_SendLog
MediaLog_WriteGraph
MediaLog_WriteSysInfo
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE