ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
a710a0c5080b4fe20793c7ef78520ca3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a710a0c5080b4fe20793c7ef78520ca3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a710a0c5080b4fe20793c7ef78520ca3_JaffaCakes118
Size
583KB
MD5
a710a0c5080b4fe20793c7ef78520ca3
SHA1
8b2901350ee21a79f1ae5bb57fa2b3f313c8e09d
SHA256
b2f5240e8dfbfd2cd2a7dc2ee823543e0532523361b5eb7fb576bfbb10908abe
SHA512
e920a29c9cf91fcc8b4f7e26b819a125ae6bf560245d6f70b181c1c7ac968ae864cc2b985ccebd0a2173f2b33aa31d8753ca785a9579ad81cd45c58de485f8e6
SSDEEP
12288:5VCfSGoo7b+AqRgDYOowIsaCKGajvrhehsNB0EQ2jrJH:5VCfE6aAqRHdsHKGa1ehs0j2jx
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a710a0c5080b4fe20793c7ef78520ca3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE