ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
037e893a61ee8b24050de1670a1425d6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
037e893a61ee8b24050de1670a1425d6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
037e893a61ee8b24050de1670a1425d6_JaffaCakes118
Size
616KB
MD5
037e893a61ee8b24050de1670a1425d6
SHA1
5379813d75bda580cdd85eb3780edb0c7d8357f5
SHA256
9d806468fd8080eb5724551e931e3f4e312c398dd63f34a41c6f5433f7853ec3
SHA512
55eda5eba6d25582bee2c3b96eaf760804b20b865e2ea72ea7ac303289d70b53594c31d822633d08749314a754591515263dc31fd9f030b03a6e0183a9ab3356
SSDEEP
12288:ctthbfw/VbEJl7ogyCFTo4Vh3ymoSqBecN8UjVNczruH30bBPDj5K7:ch7KVbEvMpCNliMVUme
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
037e893a61ee8b24050de1670a1425d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE