nzLogOff
nzLogon
nzShutdown
nzStart
nzStartShell
Behavioral task
behavioral1
Sample
046020ccfbc1b40f0e0ce263fc4edd7d_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
046020ccfbc1b40f0e0ce263fc4edd7d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
046020ccfbc1b40f0e0ce263fc4edd7d_JaffaCakes118
Size
217KB
MD5
046020ccfbc1b40f0e0ce263fc4edd7d
SHA1
b75f8fc351f45505982092ce804e7d1253a9cddd
SHA256
496f7cab87bf4831373b6defaf941d439959577e38097b631d961a55d6f11cc2
SHA512
f3596c3988e7561f3edb749990481609c0b9df7b507069b15092055177236654eacd733f886abc81a3c368751e21931a5187547f82d2d7bbb4e231e0f983150c
SSDEEP
6144:4oYnX3fnNzWKkqwT77zoX0VLqsfZpKLLs4UB9FE:4oa3f5Wp//Y0VLqsfKifFE
| resource | yara_rule |
|---|---|
| sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
| resource |
|---|
| 046020ccfbc1b40f0e0ce263fc4edd7d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
nzLogOff
nzLogon
nzShutdown
nzStart
nzStartShell
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE