Load
MirandaPluginInfo
Unload
Behavioral task
behavioral1
Sample
12542019ed647856d6647040fea5bb57_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
12542019ed647856d6647040fea5bb57_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
12542019ed647856d6647040fea5bb57_JaffaCakes118
Size
270KB
MD5
12542019ed647856d6647040fea5bb57
SHA1
b20deec6433247c3c45ae3d9ff2fcaf523999ae1
SHA256
b963dcdca03951e99464915b7ac7ef40782f7a70ca3b3b8318b1da1eef211dba
SHA512
ee0cecaea63b3ca07cc4d333ccae133d765ed3473963c523aa10f135e8c084d3276bf9bf2cc07a212424f379821fb23eebd3e928eded9ba501f179f2e4abb43c
SSDEEP
6144:9TzocnSzxjFsg9CzC2/ctjsZpmDsCdIS24/1Wu4KugoKoqbU8205:9zSdjF19u/c80/gu4KXoP8F5
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
12542019ed647856d6647040fea5bb57_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Load
MirandaPluginInfo
Unload
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE