StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
04715c04c42178768826ab5e0419c108_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04715c04c42178768826ab5e0419c108_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
04715c04c42178768826ab5e0419c108_JaffaCakes118
Size
684KB
MD5
04715c04c42178768826ab5e0419c108
SHA1
c87efb954231c9567274e2b0677710f0275b2eca
SHA256
d7beb2b3b5f2452b4ce8cb015687707498e33128871cead71628b5e00b6fabec
SHA512
c86a8130c1f2870ea4833ed1414144efafaca37b678a1101c6356a0e05df01207b7a7b3b4e472597e1c04b47025e8ee062268ae0041592804435e882daf16caa
SSDEEP
12288:Pcr15LU3/bZ8fyOYA0rw7qzPHJmJTGpEgdnxv3u3vIycv3A/S4cI3wEYGK:+15U3jSfyOYA0cOIti+vITARw6K
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
04715c04c42178768826ab5e0419c108_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE