?SetWindowSop@@YGHXZ
?SetWindowStart@@YGHK@Z
Behavioral task
behavioral1
Sample
4000a2fb800e5673a3179ba3b217bb2e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4000a2fb800e5673a3179ba3b217bb2e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4000a2fb800e5673a3179ba3b217bb2e_JaffaCakes118
Size
542KB
MD5
4000a2fb800e5673a3179ba3b217bb2e
SHA1
514263002ed6bdf0e2db433d20c845b97030467c
SHA256
45e51b2f25cf7b57dbe0ab46a260ec4002cca66405a3cf0835fa8a9eca57ae7f
SHA512
e16ec57b17e84fbe21d2a986b25c08855b37b21f9218cfa6f604bdff2176c3e40c136231df3bfb61a26763e5415f6e55207a1f7af12488680678053689c494e1
SSDEEP
12288:b4QwrV1xWuT5jVuR6TLMFMvwmb1TLr4MDLSTiFe:b4QwrXx1yRsMFWwmb1/TDOTiFe
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
4000a2fb800e5673a3179ba3b217bb2e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?SetWindowSop@@YGHXZ
?SetWindowStart@@YGHK@Z
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE