Install
Launch
ServiceMain
UnInstall
Behavioral task
behavioral1
Sample
fb184e6c17e6ec8ab76c7a3f4049dbc8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb184e6c17e6ec8ab76c7a3f4049dbc8_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fb184e6c17e6ec8ab76c7a3f4049dbc8_JaffaCakes118
Size
399KB
MD5
fb184e6c17e6ec8ab76c7a3f4049dbc8
SHA1
c18d586a09af3e3d0b2a9abe862a1fd1ae489b99
SHA256
14ec6d9eb96ca4ad53e29096669cdc7592e80a1d537ea515ededd193aeabda4b
SHA512
fe752dc4d29319113575607b70a9e8b69f1ef3f313d5e92d074301858c3f104ad0f464ed9d860ac38cd1993733a65e2f6c3ea183b04545e996e86f1d3cdf47fe
SSDEEP
12288:h4qYOZvkWzR1z5onsTgz8e7BpL+HXBT0Iw5p+4diJ580N:WahXzxy8e/WKl5U7b
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
Processes:
resource |
---|
fb184e6c17e6ec8ab76c7a3f4049dbc8_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE