DoMainWork
DoService
ServiceMain
Behavioral task
behavioral1
Sample
faac840cdbed6a7d6dcb9a4bde788f60_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
faac840cdbed6a7d6dcb9a4bde788f60_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
faac840cdbed6a7d6dcb9a4bde788f60_JaffaCakes118
Size
34KB
MD5
faac840cdbed6a7d6dcb9a4bde788f60
SHA1
85f906a7b9c1bfabd3df73a30afa905d3efbe6d6
SHA256
3805829f70d5c02456a9e99c72c0a04c0ac30189f2be2a22ba70352a6e53d85e
SHA512
608f81d65f65856edb0908271b0e73499d1ee7356f923fbfe71926934e993e9ffd3807104f0ea26f9b2323e7f1065309c850e219bfa7c9ac1f6f7cc0ab075ebc
SSDEEP
768:BFNrvyFIJq5k4FC2HQUZwwrkT2q03aNVB/UulqlqK+SIyuFy/6/QCfrqsgMo:Bvvpmk1UZww02VsVB/UMqlq6uIyVzo
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
faac840cdbed6a7d6dcb9a4bde788f60_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE