?AddHook@@YG_NK@Z
?DelHook@@YG_NXZ
?ScanPwd@@YG_NQAUHWND__@@0@Z
Behavioral task
behavioral1
Sample
70e466aa2fa779a273e77a8a4d297a68_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
70e466aa2fa779a273e77a8a4d297a68_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
70e466aa2fa779a273e77a8a4d297a68_JaffaCakes118
Size
60KB
MD5
70e466aa2fa779a273e77a8a4d297a68
SHA1
6568a5dfdd7599bc479e54ccbdd44bf37dcb7a08
SHA256
398dbe7edf717bd6dd5ba76401652dc60745d0393da679ee03c53aa28aa4708e
SHA512
293bb408bfccea11b06d742f5ef31c022e528f1654f244d8db70151f54b852f38d026109c24a67e50221f14b8b5ddec6f25104c3f33b72216d49c870f17b29b5
SSDEEP
1536:kKtx/qrE4lNOzfO91CqdLlVT8jN2wQFLM4Up:Dx/qrE4mzfOv9lH5ANp
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
70e466aa2fa779a273e77a8a4d297a68_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?AddHook@@YG_NK@Z
?DelHook@@YG_NXZ
?ScanPwd@@YG_NQAUHWND__@@0@Z
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE