ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
ec105dfde80c3292e4c536f1c66e3778_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ec105dfde80c3292e4c536f1c66e3778_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ec105dfde80c3292e4c536f1c66e3778_JaffaCakes118
Size
691KB
MD5
ec105dfde80c3292e4c536f1c66e3778
SHA1
0a99b6b748c969724a510a2fe52d4627866de73b
SHA256
5131bd39897ee29f8bafc256aafdf5ab0a94fb2759e6134dc2fa26c0b1e17533
SHA512
d8b17419bc49a79c60aed280fbb6f4460f8ef738fcd64af8627aef260242c4430b5347efd05526d24acb6ed96da874beba9f81b0f4e70a499b1ab62c7c48c42d
SSDEEP
12288:1gMNIDIBFs5VJGpFjqBDxPQU8/+SV9iztmLfGOTKaej:1g8I8BSotqJx4p2rwLf5TKaej
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ec105dfde80c3292e4c536f1c66e3778_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE