ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
03c245dad2ca32d239e629cb8f1ca800_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
03c245dad2ca32d239e629cb8f1ca800_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
03c245dad2ca32d239e629cb8f1ca800_JaffaCakes118
Size
636KB
MD5
03c245dad2ca32d239e629cb8f1ca800
SHA1
aa910cf81ff19e006ac6f90ef0e5d1695401bf04
SHA256
a6301a0df727fe24ea5e16b93f364a282d7877dfe50325dda89e84b6a3a7d940
SHA512
783be3a72ae621e83e82928d2c86f386f1c31db483b16dc971650c6300662f4d2341e46106c0be93ceb9d3e6f1b67710dadd0efbe2cc1e0aafcaeb8adcffaad0
SSDEEP
12288:MOJtr/QwuAls9HyP4rNjRfAJLNc0OKctbGwof1SpbBEIb5bxXMlOi8BO:td/Qw9offAJS0stbGwouJx8IiN
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
03c245dad2ca32d239e629cb8f1ca800_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE