DoMainWork
DoService
ServiceMain
Behavioral task
behavioral1
Sample
45b5f9de6f124c74203e0075713c852d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45b5f9de6f124c74203e0075713c852d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45b5f9de6f124c74203e0075713c852d_JaffaCakes118
Size
386KB
MD5
45b5f9de6f124c74203e0075713c852d
SHA1
c90689de6e4529a5fa4cbeed0484ace26d621c87
SHA256
b656090493a219f654f4c612d9f79819954ecdd73753b05de645e207bd786a5d
SHA512
7b70939e18264866bcb0ec1642d7614c9c5e8396f94fd7e677dbb2207955df58cc929d526ac34b82b2d66580c544f88adec5003d0d6855e0e0a867078366bb33
SSDEEP
6144:Nb/wBUHF2idZecnl20lHRxp3goncduD7yB9VCO6Sco4q8+dE6Cqa5inneL7:BIBUlF3Z4mxxDDqVTVOCaonnu
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
45b5f9de6f124c74203e0075713c852d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE