ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
005f363d68d59a50f5b7d6609424f73b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
005f363d68d59a50f5b7d6609424f73b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
005f363d68d59a50f5b7d6609424f73b_JaffaCakes118
Size
507KB
MD5
005f363d68d59a50f5b7d6609424f73b
SHA1
d7e6fd73e10ba4ce3f55d6f495984d2faaf6c59c
SHA256
7e97d7fe7555bf8f030062177ad5326a3f477f565087dd084dc19b1c3a792613
SHA512
264ac591b1f417da07c2c5a3584fcb31a6dc19b849102bb14ec78c6edb5312682aacce3e853680bdbab8d24aca859b8b69445ae586f6aac8716fdbb1503b15d1
SSDEEP
12288:K/1l8VG5YwOn24RmFPv52n1UtKV4IW1aAzgQjI1OWaGVf:K/1F+K48FPh210KyAAzgQU1f
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
005f363d68d59a50f5b7d6609424f73b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE