DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
Behavioral task
behavioral1
Sample
0ef756d523c9fdaedd5d61bc785405fa_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ef756d523c9fdaedd5d61bc785405fa_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0ef756d523c9fdaedd5d61bc785405fa_JaffaCakes118
Size
427KB
MD5
0ef756d523c9fdaedd5d61bc785405fa
SHA1
e8e3b87cb702a61604a3935f2db7ac0c1faa6e12
SHA256
6da5b9f5025f13f072781b913c20274f554f535b21ce27d5abf591eb7aefef20
SHA512
463b9098870dc11e87c4929564394f092d0c1ad9c5121df161bff6d364a4cfa8ad0743ee975f1e406e3863b991e8030bfdd09f83bfc347b670d507b6823f8d25
SSDEEP
6144:t7SY7/c3G/F2idZecnl20lHRxp3ghwNh1IrodaV79oBv8PGpcj28Dl+mJSImXrmx:JSY7/EUF3Z4mxxcwNIo+68m2l+GkE
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0ef756d523c9fdaedd5d61bc785405fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE