?CTP@@YAKPAX@Z
?NBF@@3KA
?NDI@@3KA
Behavioral task
behavioral1
Sample
f60c6c1ab3718b15f3f78567e840e3bf_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f60c6c1ab3718b15f3f78567e840e3bf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f60c6c1ab3718b15f3f78567e840e3bf_JaffaCakes118
Size
385KB
MD5
f60c6c1ab3718b15f3f78567e840e3bf
SHA1
5e8367301c7df95d117af6914ae1f90f00b1eda3
SHA256
a06fda64654562b8cd9ee3822b0f20b5bf13db4745360ad189cae617966ce5d0
SHA512
b440caf2aa98a21bed13bfa67611074e91c6c16cffbeadf217233cc140292b16f1a092a9a931033e3caf496be0c71cb22277012f037cdc982a50bb85bb4100f3
SSDEEP
6144:m7BFXtZgGILgM2u+nmzK6QgSuHL5vj6pNYAxrcxnE1CQcYI8+yXObxKqG9sq:mV+GIEGpzK6FSkFvNAeF0CxYgdbi
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f60c6c1ab3718b15f3f78567e840e3bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?CTP@@YAKPAX@Z
?NBF@@3KA
?NDI@@3KA
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE