StartHook
StopHook
Behavioral task
behavioral1
Sample
2820e2e654213b58ac5a82fd92578cde_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2820e2e654213b58ac5a82fd92578cde_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2820e2e654213b58ac5a82fd92578cde_JaffaCakes118
Size
115KB
MD5
2820e2e654213b58ac5a82fd92578cde
SHA1
4711367e7bddab9435943a643316eaa7846c0e9a
SHA256
feda45bf5ea1c6ebb9cfaa231e7699806e5081ef3d48c42580186c8a0c17c6a9
SHA512
9e686f25cc0f58ce80507943617fdfb81a12da57ede301485f8df036ca332d2fe8cf8fe7549cb117c42363b747d2bff952e4b27f7a200723f6780ba79a9d6de1
SSDEEP
3072:XDAVC+8lWRkNpZHPImtS5Es2K9Tbw9yDxu:zAV38lsk7BPXS5Es2ATbwi0
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2820e2e654213b58ac5a82fd92578cde_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE