Install
Launch
ServiceMain
UnInstall
Behavioral task
behavioral1
Sample
3cb9ed1258621b52bd03f1ddd1cc56a2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3cb9ed1258621b52bd03f1ddd1cc56a2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3cb9ed1258621b52bd03f1ddd1cc56a2_JaffaCakes118
Size
448KB
MD5
3cb9ed1258621b52bd03f1ddd1cc56a2
SHA1
e46de692453333fe15b95b92ef083da986d421ee
SHA256
89094c9f42346b5e29ee8b53a9e246bd194b64a28be31b6b70bf34c68b95e2ae
SHA512
696731cff9cabc738fc979ae783f7790b4ee58b7feed33e120665158ba50ec47ede2a986a7453b5fd63c70c681172488f48ea26199437dba79556cb8fe2c5ce5
SSDEEP
12288:DSXcgacb9ea9mE9y/BKTrH54wyHsqrtfQunka1KNaT/:DS3b5zmVQTr2sqrFBkkr
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3cb9ed1258621b52bd03f1ddd1cc56a2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE