ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
04abe924f618486a542d9548ee74c8c6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
04abe924f618486a542d9548ee74c8c6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04abe924f618486a542d9548ee74c8c6_JaffaCakes118
Size
437KB
MD5
04abe924f618486a542d9548ee74c8c6
SHA1
1358a034ef4d94e2e46c965875fd2e08c8b4d9f0
SHA256
7224873e73c1a8c9f54c82e5cb134cd89da328027d0f5456a73f54e85f6ff5ac
SHA512
7a6707204c6db3a5d76895d9d2435a5169c27c091e054479ab0047045cc9c0b37dff37838e53177c4cf586875670d5ea1f1d14a94ab5f4f602428a1510765c36
SSDEEP
6144:RkA0N6TuqN5Y5egEyzeHSNrndX3HLFrfiRkw3ilfpQWBnzPWheYmP5QajNyDUGWX:CN66q/YKyayNrF1YkwEfp6he5BUUD
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
04abe924f618486a542d9548ee74c8c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE