DllRegisterServer
DllUnregisterServer
InstallService
ServiceMain
UninstallService
Behavioral task
behavioral1
Sample
4c4cf61c39e7870ecd2e28c80b47e2d2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c4cf61c39e7870ecd2e28c80b47e2d2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c4cf61c39e7870ecd2e28c80b47e2d2_JaffaCakes118
Size
117KB
MD5
4c4cf61c39e7870ecd2e28c80b47e2d2
SHA1
1ad467c15fe64b7c60b41b023cc36f13bedb9b70
SHA256
528af5a12e394736bf99abf02b6dcd0040c0ef88052deb78d366943e9ca21da1
SHA512
93f893781e6b9380f5d24aa4927afaad87935a048120fe27451e8a538b2933e1a8d39249509d28cfea8760e140cf495625e08cda8254fe3358d69a5f64020372
SSDEEP
3072:BKiWuddKEkPiJxRZo1SjnJLXZcNcxYhdw7Gi7MIjfWpDn3HXn3HXn3HXn3HGWqC5:BWqhzX5tLmEYh6GgMIjfWpDn3HXn3HXv
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
4c4cf61c39e7870ecd2e28c80b47e2d2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
InstallService
ServiceMain
UninstallService
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE