ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
01319ae16378e5577a83e25d715a7eec_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01319ae16378e5577a83e25d715a7eec_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
01319ae16378e5577a83e25d715a7eec_JaffaCakes118
Size
507KB
MD5
01319ae16378e5577a83e25d715a7eec
SHA1
d7cc46d410a218fb503d33559588b9d3f32a83d2
SHA256
bc1443c5dd2bd6dd4573f8fd86c1e6a2037705efbf8cccdbc8103bd05fb750b4
SHA512
89cf2ece0d240b4bd638461a176a27b2c33b6e9c0c4994138c8df7a815ad1eff05ecc9e6efbd033395f0a5e30d5b14944714212bdd4f3588a0f0989e6c02afc0
SSDEEP
12288:K/1l8VG5YwOn24RmFPv52n1UtKV4IW1aAzgQjI1OWaGVB:K/1F+K48FPh210KyAAzgQU1B
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
01319ae16378e5577a83e25d715a7eec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE