ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
04a776dbeea7f13b2319860af48f147b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04a776dbeea7f13b2319860af48f147b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04a776dbeea7f13b2319860af48f147b_JaffaCakes118
Size
437KB
MD5
04a776dbeea7f13b2319860af48f147b
SHA1
788ea49c3c907f22739deaf3122d8bec2c7cce8d
SHA256
a8efa5c52fc6a77c85b5583819f4a009c90d690177890f90d38855afb5a80d38
SHA512
53dfc0caf74b1d441e894e80bc1d898e0963512c614bcf34dbc0f82ef218bf49394fddd9f9e72529d949ac562cbe2d05c7e3651cb8ebcb1f34b237dfd15ffa59
SSDEEP
6144:RkA0N6TuqN5Y5egEyzeHSNrndX3HLFrfiRkw3ilfpQWBnzPWheYmP5QajNyDUGWs:CN66q/YKyayNrF1YkwEfp6he5BUU4
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
04a776dbeea7f13b2319860af48f147b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE