KeyboardHookProc
MouseProc
Behavioral task
behavioral1
Sample
37a0324895962e62f3260ed22de9ffc9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37a0324895962e62f3260ed22de9ffc9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37a0324895962e62f3260ed22de9ffc9_JaffaCakes118
Size
49KB
MD5
37a0324895962e62f3260ed22de9ffc9
SHA1
b8bbafd6dadd5d2ffd7c7db4992a72f3766c4d81
SHA256
d61b1125042cb52055b4bf0b1896f709c54f65c3ac3fc989f9ffaf7e1337ecce
SHA512
e1698c56d620746e5c4e82b9a03f50ebd5b47ade94a05d3e51259a56db6ede3898704059ddd483714daeb0e4e71b151c6d5fa3f9eca1d1737f088af8703053dd
SSDEEP
768:51DpSktwru+03awWMEKb8UvLTwXYzsIrAKsE61LGLv7NrYykqVmJzf2yltIxydeV:I+hWFKg8kK1eq1YEVCf2ylT
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
37a0324895962e62f3260ed22de9ffc9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
KeyboardHookProc
MouseProc
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE