GetModuleId
ke_GetFirstObj
ke_GetModuleVersion
ke_GetNextObj
ke_IsModuleExists
ke_ModuleAvailable
ke_NotifyEvent
ke_Rand
ke_RegisterAndLoadNewModule
ke_RestartProcess
ke_TerminateKernel
ke_UnloadModuleRequest
ke_free
ke_malloc
Behavioral task
behavioral1
Sample
add07306c2b6d60634f55184eb7adf45_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
add07306c2b6d60634f55184eb7adf45_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
add07306c2b6d60634f55184eb7adf45_JaffaCakes118
Size
110KB
MD5
add07306c2b6d60634f55184eb7adf45
SHA1
99b51051da0c8b9debce0f6a391d2b0da353750f
SHA256
e1b66fe3d96d6eecdb3e6167d94bf9d31cc10c3b82ae03a0100c73ec957d7395
SHA512
f84c717d87ea813aeddc6ef3868567ad686c20a8ff53aa3961d22a76331b5fd4e0493c9d2209080186b516bcc7ee335a341dd30ec7a04d1c352c646b3cdcad79
SSDEEP
1536:vZAqy2k5gHxxZEdscpg4/G23D1iovBMZTI2TIwIZA0FdxdoE:hAq0gHxxSdHg4/NDMoZMZTI2T0S0Ft
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
add07306c2b6d60634f55184eb7adf45_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleId
ke_GetFirstObj
ke_GetModuleVersion
ke_GetNextObj
ke_IsModuleExists
ke_ModuleAvailable
ke_NotifyEvent
ke_Rand
ke_RegisterAndLoadNewModule
ke_RestartProcess
ke_TerminateKernel
ke_UnloadModuleRequest
ke_free
ke_malloc
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE