ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
b5f43df6d5dbc961d30ccd5a34973c86_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5f43df6d5dbc961d30ccd5a34973c86_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b5f43df6d5dbc961d30ccd5a34973c86_JaffaCakes118
Size
630KB
MD5
b5f43df6d5dbc961d30ccd5a34973c86
SHA1
726512e1acb89ce52bba9580c3da77f0612eff2e
SHA256
4c9a53307dfb3ef30de49e9f3cb7c27721df61850e46d4c72f7aeab083235da1
SHA512
2413ff9314bec3b6b1b8e3a368c41f84fad85057ebdb8ba64d9bdc44c9bd8fc778021dee55cddd5a6aac8733fc8c962d6f4fc3dfdbdc26076d7cc72a95ac3042
SSDEEP
12288:Fnd3WsHXAVP61BwA6BAbFgAQ1i+XzwtUgLm80OFOJvmFmpeFVS:xdWCAVP6UAeAh68+XVhGQmcpWS
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b5f43df6d5dbc961d30ccd5a34973c86_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE