F1
F2
F3
F4
F5
Behavioral task
behavioral1
Sample
ab330b20506ff37348848ca1749f5cc7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ab330b20506ff37348848ca1749f5cc7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ab330b20506ff37348848ca1749f5cc7_JaffaCakes118
Size
356KB
MD5
ab330b20506ff37348848ca1749f5cc7
SHA1
0d2483194966a8681da8475e10004a4d5b0d839f
SHA256
d4ffbfd76ab967b1a98c5c7da319fc004cb3af2f3e03f5b91037db0686d8e29b
SHA512
d4ebbc9ef37af31967ba8e20de473baeb2aa039b25f390cad5ac40593ffbcfaad7bea19026b76f79d094849c12ee7f3a9e44f529b37852b1315926d1e1ab8a67
SSDEEP
6144:zYAHbF2idZecnl20lHRxp3gjdDGXuTzNyBnHQhGOz58BJKHxRsGwg:UA5F3Z4mxxWdD3TzMxJOz5EkHP
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ab330b20506ff37348848ca1749f5cc7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F1
F2
F3
F4
F5
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE