ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
1794eb7f04113c899a28b4efed8656fb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1794eb7f04113c899a28b4efed8656fb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1794eb7f04113c899a28b4efed8656fb_JaffaCakes118
Size
712KB
MD5
1794eb7f04113c899a28b4efed8656fb
SHA1
f53ca3dd0c435b569e0c91df8c1ac4f09a0e9ab9
SHA256
52678030b4aa189a9ef16b6d0f748c79bbdda5a316cd190b7e9b6a38a05c2529
SHA512
f8fc0848adc2e4e3fa670cf89d22265b94b2dfd22958df1402071b022196b82d9a6d066114ea1ac8a06eda6615bf65abc85199d35696dea2bd874d02adf28bdf
SSDEEP
12288:EDAtve3+hXpr7F5XiR5ve4cr30ZqmDGOLE1y+5g:XveKvSR5Jcr3wqmhLQy+m
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
1794eb7f04113c899a28b4efed8656fb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE