ResetSSDT
ServiceMain
Behavioral task
behavioral1
Sample
31917823de0527d4ecb6f37ef682683d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31917823de0527d4ecb6f37ef682683d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31917823de0527d4ecb6f37ef682683d_JaffaCakes118
Size
207KB
MD5
31917823de0527d4ecb6f37ef682683d
SHA1
fc0d959b18d94ef1f92f528e4640c24df01544e1
SHA256
b037a3740a20cf4b622d6f05e64f3a4b6b0346a7943f5b819c3078f2c15c251e
SHA512
4b53ca1849d5ded5c326ebeae6d27f2b971c1a19f1c0ae4f8c21505b2c6d9d4b5c7fb90a6c140ffac5de9eca67308a1c7a05f50697a713982e56e1d20df19312
SSDEEP
3072:v/4uiHBuvCoEK4SLEvLB+SUaFPmgRMNlPTGQQm6ytwZEsrYkK4piUZbj:TMuvNL4Hv1p98gWNlPTGQQm6agrd0Up
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
31917823de0527d4ecb6f37ef682683d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetSSDT
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE