___CPPdebugHook
_removeHook
_setHook
Behavioral task
behavioral1
Sample
ac38476257ba715eb81cd53322ed0841_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac38476257ba715eb81cd53322ed0841_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ac38476257ba715eb81cd53322ed0841_JaffaCakes118
Size
299KB
MD5
ac38476257ba715eb81cd53322ed0841
SHA1
ecfe690eecb804e1e426e6147f7eae71a1ccadbb
SHA256
177146d317270ba8da84393d7c37c1173efe7fd4a3d79fb20626a0cb78b37e75
SHA512
63e364ef2531d449fc6128cc6c87875d6e1958f1308c23b092d781cf8d3e9809821767ed3c5490c1f0f9318676c94e00618fb00c9214311f005d6c9e80b584eb
SSDEEP
6144:xR2N1cNwPLvoqg0R2VhPefm0ToNjXG/WxYm0XdKNCQ6QIwJvLPSgnelJjA:xR2N1c2obY7e14XEeQIw1PSgnj
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ac38476257ba715eb81cd53322ed0841_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
___CPPdebugHook
_removeHook
_setHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE