ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
062f3638d212218ae33d212b327c2c8e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
062f3638d212218ae33d212b327c2c8e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
062f3638d212218ae33d212b327c2c8e_JaffaCakes118
Size
437KB
MD5
062f3638d212218ae33d212b327c2c8e
SHA1
43b1118494a765397f2bf82f0fffcb9c1ec61ecd
SHA256
b067b983d159341da731726a7d0eb918eb2206c867ef8394173d39c0662b7d8c
SHA512
2aa973aca5a1c7c610768b2e7024c239878bfbe5656cec94e341df0b1d4e1807108d09c1231d8b83e846f208575023474b2d2e42296a4689d3ef1dcf985f27eb
SSDEEP
6144:RkA0N6TuqN5Y5egEyzeHSNrndX3HLFrfiRkw3ilfpQWBnzPWheYmP5QajNyDUGWc:CN66q/YKyayNrF1YkwEfp6he5BUUA
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
062f3638d212218ae33d212b327c2c8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE