ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
fa332b5e7099e8bb328219306a7fcfaa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa332b5e7099e8bb328219306a7fcfaa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fa332b5e7099e8bb328219306a7fcfaa_JaffaCakes118
Size
691KB
MD5
fa332b5e7099e8bb328219306a7fcfaa
SHA1
64c5d9447c8c3f2423b3a0faccff878f4c0c9209
SHA256
88caf1d397e40c532ef316355a235719275cad9944a19f9c6459e59b3f814e7d
SHA512
7085c9e88d20d6e3d6e85e19406cb1b4045e98e9e35322b21fbce2c7772f293984736801902b680bdf7be57e0aebe22f80f27f6f32e8358dfe7539ffef95d33e
SSDEEP
12288:1gMNIDIBFs5VJGpFjqBDxPQU8/+SV9iztmLfGOTKaeV:1g8I8BSotqJx4p2rwLf5TKaeV
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fa332b5e7099e8bb328219306a7fcfaa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE