ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
ddd83bc2ef0489c23b0529f52f6a29e0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddd83bc2ef0489c23b0529f52f6a29e0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ddd83bc2ef0489c23b0529f52f6a29e0_JaffaCakes118
Size
572KB
MD5
ddd83bc2ef0489c23b0529f52f6a29e0
SHA1
62b37f7211eb0a8efc2eb1684d370cf2dcd397eb
SHA256
78dcda0a8cb070dee5843abd81e86472bfd6ff90de5e7ace703d78107d067e5e
SHA512
b4e596b34ede1b232b34179841aacc4cd33f2a9bd2185cbbfa847d9de31c1a65ab64f11a9747e1d794504bf4d7d81a91b47056d0bb96678500a0c5b707b4bc7b
SSDEEP
12288:IZa4BeZGpmJ1aDuV+77hrARPhvKJwsAMF39Ib8rozbLCqm:IgsejTXY77i3vXMFSb8vF
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ddd83bc2ef0489c23b0529f52f6a29e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE