DoMainWork
DoService
ServiceMain
Behavioral task
behavioral1
Sample
2a1eb66093782d0577eb3ca688fdf5e4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a1eb66093782d0577eb3ca688fdf5e4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a1eb66093782d0577eb3ca688fdf5e4_JaffaCakes118
Size
379KB
MD5
2a1eb66093782d0577eb3ca688fdf5e4
SHA1
7953308763725ccb04931bd9a4eee9c76715bbbd
SHA256
47cc562889ba59070d2ee60d6407c9c96bd3e523614dabaf7183f760dbc00433
SHA512
7572ea779308d37dbf4c0efa911c3659e53c4459500aa3719412710d7b1aa7a549aa8b4871703906fd906fc8fffd8270004b8003c055bacbeb0318271623855a
SSDEEP
6144:Z1BPSg9NgF2idZecnl20lHRxp3geEsnHA0nTLz4xGPpxeq3sxq3+vpSIv:ZHZ/QF3Z4mxxX7Hl8xGhGqupSIv
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2a1eb66093782d0577eb3ca688fdf5e4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE