ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
da6eb710b260f6d88d3f8d3d9154e956_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da6eb710b260f6d88d3f8d3d9154e956_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
da6eb710b260f6d88d3f8d3d9154e956_JaffaCakes118
Size
521KB
MD5
da6eb710b260f6d88d3f8d3d9154e956
SHA1
6cab06200c566963886dc9a13fa2eee0570f4bb7
SHA256
b8c50e3a3a4a21be7ca3da1117f885c7f7bc741018963994d5fea972512d66c1
SHA512
0a4bd53cfb4b025f999de5c16cbbdaf7edff4f1e386c6c4c095e34a7b8123b8add789bece1b9428b6ab6bef600496e78d0b94fbdc243b56212f82d62d0cb3db0
SSDEEP
12288:04JE0t+khqGj9PRjEhb6YmZLAoWlZGEiXIgbz8iOGa0EQ2jHSp:F2zkokDW6DZ2lkXZbBOGa0j2jHSp
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
da6eb710b260f6d88d3f8d3d9154e956_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE