StartHook
StopHook
Behavioral task
behavioral1
Sample
848863814a453e7e392d7e371e6d4c66_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
848863814a453e7e392d7e371e6d4c66_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
848863814a453e7e392d7e371e6d4c66_JaffaCakes118
Size
542KB
MD5
848863814a453e7e392d7e371e6d4c66
SHA1
ba6ea9cdfb99715029f5196aa7fa8791ae3635a9
SHA256
5014897327c3fc193f56294c4d592c151eeb3aee99141040e35dfbed4abe0dc0
SHA512
9f531c55bee21a682b86de51a5cbd2205f4f9babf30735daf3578a00479e49ede1903cb97e69a782bc1b92fabf16fed25b005760a58cc75d28a2b21feb79da5a
SSDEEP
12288:0fU3Pk8OdIjIdgNiJ7veF3Z4mxxqWS68cIo9xE1q11K:0fUedIj4veQmX0ANo17
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
848863814a453e7e392d7e371e6d4c66_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE