StartHook
StopHook
Behavioral task
behavioral1
Sample
2f4e0bed1d97d18899c5599a6335ab7d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f4e0bed1d97d18899c5599a6335ab7d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f4e0bed1d97d18899c5599a6335ab7d_JaffaCakes118
Size
120KB
MD5
2f4e0bed1d97d18899c5599a6335ab7d
SHA1
a4b89714dcb736a76a4d9bf12e66e4574a8a79a2
SHA256
21f5369735f8a89826269bde2efea4f6cc84c251a421e52a6ab5b44c04cbe7ef
SHA512
5fd5f0e0a8ec4ecff866a48f46a4174f268c00d382220c7fcb89ad9aaf09b2dd9c53fc13cc5a08c0973af08800ef8b84850a09508690022e5e18d62eecc5eccd
SSDEEP
3072:deYZ6FCLi/bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7Dzt0q:dxZ4wQwvP6bQ7yMP+DE827PR
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2f4e0bed1d97d18899c5599a6335ab7d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE