iipCloseSession
iipConnectClient
iipConnectServer
iipCreateSession
iipExitInstance
iipGetRemoteAddress
iipInitInstance
iipInstallCallback
iipSend
iipSetLocalAddress
iipSetWorkMode
Behavioral task
behavioral1
Sample
3d71a27c86ca8220025e6b3f25b1dbd2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d71a27c86ca8220025e6b3f25b1dbd2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d71a27c86ca8220025e6b3f25b1dbd2_JaffaCakes118
Size
341KB
MD5
3d71a27c86ca8220025e6b3f25b1dbd2
SHA1
5e4ec2a825fd9dfb69d817f572f0da069cc2362f
SHA256
74876ea1f01a34c62973607e3a3a7ec68ad40c8bb8a2798e83bdd975954f4e8f
SHA512
16a7c6c2f28fd20a2494c2f2f6e86b99ac90901b704e63028e75487e2d229838f3afab7c574cf6d5941b51ecae669c29a69e6733a166455692bbbb59a52802ac
SSDEEP
6144:JGpFj/gBfALvphI966AGkAjOpoaY7QK6+9VbHGRRGn3yro0BS4OBl:JGXj//q6xGJOpq5su/06Bl
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3d71a27c86ca8220025e6b3f25b1dbd2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
iipCloseSession
iipConnectClient
iipConnectServer
iipCreateSession
iipExitInstance
iipGetRemoteAddress
iipInitInstance
iipInstallCallback
iipSend
iipSetLocalAddress
iipSetWorkMode
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE