StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
0539e87cdb0c2d62825d750b8703bdc8_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0539e87cdb0c2d62825d750b8703bdc8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0539e87cdb0c2d62825d750b8703bdc8_JaffaCakes118
Size
288KB
MD5
0539e87cdb0c2d62825d750b8703bdc8
SHA1
3de42bee4d4858a559a475015e86b3ea38505d0e
SHA256
c5dac9aba2708af68cd77374b88d66f42cca40898c0f421a31608a52565198f9
SHA512
b7b6eb0ac3e7074df2a309554fb2ab1d0a09ffe801d69736d62c1d1e6e865c33b941e4c9bb0fdce49b458a31cdfa9bd0ec50a220459bfdd615c0989e8c0f4157
SSDEEP
3072:JhbktG0axYMO+3nYjKr6xo5mJiigliM/y894nUIH7yYZi+56got+dKx+hAS/VsBg:BnyMZDr6i0R46FH72Mot+dKZjB488
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
0539e87cdb0c2d62825d750b8703bdc8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE