ResetSSDT
ServiceMain
Behavioral task
behavioral1
Sample
e763e2fe37c5f879c8dd01298c321e14_JaffaCakes118.dll
Resource
win7-20240221-en
Target
e763e2fe37c5f879c8dd01298c321e14_JaffaCakes118
Size
370KB
MD5
e763e2fe37c5f879c8dd01298c321e14
SHA1
ecf499d4b15390911e04c4fce85120d20eab374b
SHA256
a8b2d556aab03feacfd8a4582411135a30c648a9d5dd3862b1f185a0f12587ac
SHA512
7b47c408ade588da768143e0fd7ba44538714d560e60a83c5a6959ba2d5b0731691cc7468244c988cf7637b50d50d44c0f6249e5efd7414dbf893963599b279a
SSDEEP
6144:bYUj6W+F8u5bRFF2idZecnl20lHRxp3gHPp3SBo03ty/4QTRGP/D1WiM8qGqR:DefPF3Z4mxxEPj0AR+D1WF8qGqR
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
e763e2fe37c5f879c8dd01298c321e14_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetSSDT
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE