ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
063ac1a1281c6809e95627467d178eb9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
063ac1a1281c6809e95627467d178eb9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
063ac1a1281c6809e95627467d178eb9_JaffaCakes118
Size
437KB
MD5
063ac1a1281c6809e95627467d178eb9
SHA1
04d3ae0e66acdf2573c177994e0727bb26cf775f
SHA256
d8ca6fed3fa766092706e5f893d8ab5643da761953247281b2c67832e1e7eb8f
SHA512
1369b1ccc3a6de292430675dc18b3457289e0b2a1f39bfe29dfb97c01c8345c31d77b035069abe5a9bd97110313fbce89ca077749185ad1cc87841f9f63842d3
SSDEEP
6144:RkA0N6TuqN5Y5egEyzeHSNrndX3HLFrfiRkw3ilfpQWBnzPWheYmP5QajNyDUGW9:CN66q/YKyayNrF1YkwEfp6he5BUUp
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
063ac1a1281c6809e95627467d178eb9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE