ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
bd0cc7b3f99cd740c35ce569cc3bb086_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd0cc7b3f99cd740c35ce569cc3bb086_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bd0cc7b3f99cd740c35ce569cc3bb086_JaffaCakes118
Size
629KB
MD5
bd0cc7b3f99cd740c35ce569cc3bb086
SHA1
d3def291d33c4e8e3f5afc0353fca34ebc66fec1
SHA256
4ca74547bd9b50327b87d4c9af9a6199c83be533cc8652d04768b4bef2451d80
SHA512
0a977b9014926678c4ee2e6057b2655a0de63d458bd7c7fb57967fe26cdc73395bea82eaf28a2081aabe4ecc60b26931aca6d4cb3f4c820eac8ab5aad139a8dd
SSDEEP
12288:tZMS81ItYbgKetL1SwenxgauBTTo+q5syscI/QWs8GbVWFLr:7MSLV1Swex7+qg/AbVWFLr
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
bd0cc7b3f99cd740c35ce569cc3bb086_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE