InstHookProc
UnInstHookProc
Behavioral task
behavioral1
Sample
16b459c95880efde2d37ab385a9e3c38_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16b459c95880efde2d37ab385a9e3c38_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
16b459c95880efde2d37ab385a9e3c38_JaffaCakes118
Size
296KB
MD5
16b459c95880efde2d37ab385a9e3c38
SHA1
ec01c4417228f78d480525ea7daf3c3363cc199b
SHA256
a77e27d5d9f212c2f944274a4411a232edaa3c66df10adce661dc442ad6b8b6a
SHA512
504036f89ce6603c0807faadbafe734b9dbd1025a6862cdd4d77d6e9f87148dbc4b7456e310587342085a675260ef7ec2a5444df95c9f4d8cdbaee11ea39f346
SSDEEP
6144:/14sySzeAB81BklnzJ73fgCXIEPm9PmSOU6XCM6Wbdrjszo1PPy:d4UEXg9jIuIEepmphXCjWp8zQPPy
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
16b459c95880efde2d37ab385a9e3c38_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstHookProc
UnInstHookProc
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE