ChangeMe
GetFileVersion
OutPutText
RegisLongers
Behavioral task
behavioral1
Sample
14c3d6fa651dde3cc18ee7fc141dd2b6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14c3d6fa651dde3cc18ee7fc141dd2b6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
14c3d6fa651dde3cc18ee7fc141dd2b6_JaffaCakes118
Size
846KB
MD5
14c3d6fa651dde3cc18ee7fc141dd2b6
SHA1
6081fb4c0d0cce42a814eea22673d8b32cb6da89
SHA256
b76d82bfe63f32774a92ce7182140ee1d6c064ede98254979f5fc9caf80a2034
SHA512
19012cd5f0c321267e47bb2de15d4cf87b536afe84b5c16d73fb15cb5f9deb9511e1a77a9bb4e90b0087fbdd1b856f6cae1f97b03e0dcef1bdd80517aafb67e2
SSDEEP
24576:nv2EyC9BlgwfmBLINrFr6hIQtGjZiAKaNo8U0j2jIvI:7xr5SqZVKZ0jrvI
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
14c3d6fa651dde3cc18ee7fc141dd2b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
GetFileVersion
OutPutText
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE