ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
ef25afee28c3b47337173eecad28ad8f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef25afee28c3b47337173eecad28ad8f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef25afee28c3b47337173eecad28ad8f_JaffaCakes118
Size
691KB
MD5
ef25afee28c3b47337173eecad28ad8f
SHA1
a00c83721ee63d1ac4d512f03ee70552b165dabd
SHA256
e617ff2ee57f66b8d5a70e93904ec2c6747fe25d6073d774d7a3383f616ca7e5
SHA512
f18c2bedb7af5d505bfb46f3888f08074d3cc20890f75a39929e4aec9ca702172b3c125c2e4536884fb16a2448ee16b6062e7935479d5cf4df5ee3b03b8bf978
SSDEEP
12288:1gMNIDIBFs5VJGpFjqBDxPQU8/+SV9iztmLfGOTKaeT:1g8I8BSotqJx4p2rwLf5TKaeT
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ef25afee28c3b47337173eecad28ad8f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE