HookProc
InstallHook
UnHook
Behavioral task
behavioral1
Sample
fb65d533fa02b101f640d090747a7a89_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb65d533fa02b101f640d090747a7a89_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fb65d533fa02b101f640d090747a7a89_JaffaCakes118
Size
184KB
MD5
fb65d533fa02b101f640d090747a7a89
SHA1
2614233d12686876ec9138a01e80fc50f7ea2799
SHA256
e30c12ccfe3ef328497ae4c0d93b13ebec415f100df0a963edf8be34c8ae28b8
SHA512
927e88514deb1e149a4ca6a88b642de5e81658c2f1eff1de4d6833c7d8ec71cabe8261a4b925501a9566247acbed04de8a69bb9fba3b7fdfee4fa4d4166a7834
SSDEEP
3072:7Fk/lu/mK6a33wULdmROAf/WG3VeNG8gWa3Kbpz8a5f5L3QXttwoj:7uc8aQ7ROY/BAa3paj3QTwK
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fb65d533fa02b101f640d090747a7a89_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookProc
InstallHook
UnHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE