ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
b8013ee5032398a6ae8c999ef07cb061_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8013ee5032398a6ae8c999ef07cb061_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b8013ee5032398a6ae8c999ef07cb061_JaffaCakes118
Size
572KB
MD5
b8013ee5032398a6ae8c999ef07cb061
SHA1
0232abf6ba5e4740ffa5c19b408870ba8a47c099
SHA256
463d8df0171ffb1130d64f5a90f40aec95c6d711ee927afc84f24610d53f0a08
SHA512
f84c2270463f9b74f42fb60270b68243bdaa5393fbece71be183592daeafaa7076a931b6aa340e391a132e518935f00be4c387056e611666c820be1f266c6530
SSDEEP
12288:yiEIJ13M0mMvkiUSLg//wtUNe1TLov/vu1eEDd8I49hAHc/N01RYzXLYaaEw80Ev:yRI3dRIxe1yvIeE74ngsrLY2w80j2j7N
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b8013ee5032398a6ae8c999ef07cb061_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE