InstallHook1
InstallHook2
UninstallHook
Behavioral task
behavioral1
Sample
edd440d2ea932956c0f1657c7118177b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edd440d2ea932956c0f1657c7118177b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
edd440d2ea932956c0f1657c7118177b_JaffaCakes118
Size
241KB
MD5
edd440d2ea932956c0f1657c7118177b
SHA1
0da1237128da249697fd84d9a2ffed24fd4bffb9
SHA256
0035d7dabc6a1539203c613bcaca0e2c1928a731a7074da3334ad592d618fe23
SHA512
6051fe39ee31dcb67fca8ba36c6bc9e59b1fbb0223fd2cf49722dea825b53f93353296e900af35885aa32b2d1866d6e9a0c85b9d822774a115177b163704d0cb
SSDEEP
6144:H5CpFJK93XCx+Lcr06Ce9J98gWNlPTGQQm6agrd:H5CJKFlcr06CE4NtTird
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
edd440d2ea932956c0f1657c7118177b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook1
InstallHook2
UninstallHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE