ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
0dfa96abdcf6e62c20ff6dac8b1822ed_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0dfa96abdcf6e62c20ff6dac8b1822ed_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0dfa96abdcf6e62c20ff6dac8b1822ed_JaffaCakes118
Size
544KB
MD5
0dfa96abdcf6e62c20ff6dac8b1822ed
SHA1
37e6cfd0d56f4af74e2e24797d5b3e5bbca09abe
SHA256
621be83280d1723ec3164bc5187cba7bdfdd8a97752d25ad96dd97e138212453
SHA512
1d694404fb35a5ce48873c116e804b6dc84f1c7c4bc5935daccb0c622413b1e7ddff56b268e5171192fbf74dcddf763b5852204472606581a5fd3ebf26cb1c5a
SSDEEP
12288:g+uNFRWB7/FvyXZI37AcmgixknF8c0orNg:jAIdvyXZI37AcmzknKcdru
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0dfa96abdcf6e62c20ff6dac8b1822ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE