ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
e06b371c473501d450fe7dd56fbfe0ac_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e06b371c473501d450fe7dd56fbfe0ac_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e06b371c473501d450fe7dd56fbfe0ac_JaffaCakes118
Size
630KB
MD5
e06b371c473501d450fe7dd56fbfe0ac
SHA1
540e1d35159cdd5cb0c2f8622fa5f35ca0591820
SHA256
b8057b1de43bfea5c997ea1a1ae8fd6b31418c0811d30d9f20409b5487211ea5
SHA512
18e727c27879a67b45c06849d0f5b06bfc2140df181f1292bf7bea3dcf875276ca235f4e0940b01479091e2439e596d4ec9ea505adc6a2479a1a9423fc7f1407
SSDEEP
12288:Fnd3WsHXAVP61BwA6BAbFgAQ1i+XzwtUgLm80OFOJvmFmpeFVV:xdWCAVP6UAeAh68+XVhGQmcpWV
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
e06b371c473501d450fe7dd56fbfe0ac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE