BeginHook
EndHook
Behavioral task
behavioral1
Sample
fd4b7ea305ab7b21136e372aadf240e0_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd4b7ea305ab7b21136e372aadf240e0_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fd4b7ea305ab7b21136e372aadf240e0_JaffaCakes118
Size
56KB
MD5
fd4b7ea305ab7b21136e372aadf240e0
SHA1
b02424f48b9d2e97615586653d0296062a567af1
SHA256
e552b0f4bb0af2ae6352b67476f4d8b7889b206e1d8ff0eaf4d8c2f861d8b615
SHA512
c5bbc895313781618d51143e51a8d27a559a734ae3caf5da096782cb265508307f7b64d2aa30b48247b5d8fe9873c4bd29de5ecb75862a6e85a2a460ff04d915
SSDEEP
1536:h7kpK69Cs2GvaX39BnpEdNL8M80IbkHTK4G:h7MKjDGvadBnOH8M800kHc
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fd4b7ea305ab7b21136e372aadf240e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
BeginHook
EndHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE