ChangeMe
DllRegisterServer
RegisLongers
Behavioral task
behavioral1
Sample
2e934cfa355b360a87c5a47ab7ddc010_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2e934cfa355b360a87c5a47ab7ddc010_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2e934cfa355b360a87c5a47ab7ddc010_JaffaCakes118
Size
544KB
MD5
2e934cfa355b360a87c5a47ab7ddc010
SHA1
0f818f207a456f0b4a8b56c5264f48699504473b
SHA256
9f6d3985ef5a5b0c6e585f670ad3dcd654a1a455f419321a1dd7fba344955f2c
SHA512
d40cfcc57b0ae0b6a45fd0bf1cc24b13931eae3466a4105846e28c6d16a47551e5a977f7ec12c398f3709655dc590d7b6cd6a0208e4eafe4d95254f5a7648aa5
SSDEEP
12288:g+uNFRWB7/FvyXZI37AcmgixknF8c0orNd:jAIdvyXZI37AcmzknKcdrL
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2e934cfa355b360a87c5a47ab7ddc010_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMe
DllRegisterServer
RegisLongers
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE