ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
28e82fed010a09ac04c67c5e65a832ca_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28e82fed010a09ac04c67c5e65a832ca_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
28e82fed010a09ac04c67c5e65a832ca_JaffaCakes118
Size
630KB
MD5
28e82fed010a09ac04c67c5e65a832ca
SHA1
becacfae449c777219822d1f98195dd3d9794182
SHA256
b74f3106611edd70e91ea6eaa62b7fb7048c2eb7d5fe437fb1e073272a440aa4
SHA512
173c91233169589cee77ad1f9f5a57c69d926291528a0fb5f28f52f90c926961e61060493ebb6a68954216c84277e85c076851ad4d33368cc65ccb9c4137be84
SSDEEP
12288:Fnd3WsHXAVP61BwA6BAbFgAQ1i+XzwtUgLm80OFOJvmFmpeFV2:xdWCAVP6UAeAh68+XVhGQmcpW2
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
28e82fed010a09ac04c67c5e65a832ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE