StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
0613b3bda683c88e3232da4c4605fae8_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0613b3bda683c88e3232da4c4605fae8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0613b3bda683c88e3232da4c4605fae8_JaffaCakes118
Size
611KB
MD5
0613b3bda683c88e3232da4c4605fae8
SHA1
b72fd908cf11602a71801adac7b3133ddae2058e
SHA256
e977b8a70dad3a41b696a47cb9567478be9c389b464b725364b388b54fbf3b94
SHA512
8353f839164ef4b326eb0d3271dc679b2ff51202037463bae83939eceb7ea2a8a8c128d15d61e3503289a188e8655afaae16858fff083e6000fe6e1f7568830b
SSDEEP
12288:o5yMrLVmeIqzPHJmJTGpEgdnxv3u3vIycvKEEBo4njUc+YR:9IrXIti+vIFknjUi
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
0613b3bda683c88e3232da4c4605fae8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE