GetNewInf
GetNewSock
Behavioral task
behavioral1
Sample
b82799da2ba769460e743cdbc524c985_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b82799da2ba769460e743cdbc524c985_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b82799da2ba769460e743cdbc524c985_JaffaCakes118
Size
500KB
MD5
b82799da2ba769460e743cdbc524c985
SHA1
107614a695c6ab314f86168198036383dd512620
SHA256
91cf6abbb63898a2d6ede48af32d568402ad280d8e79de1e57ca4efef40ce04f
SHA512
8f1463ea4390627c87fb204c2b0c0bc2a676dd9421e508dfa85908f1eaf3b20fde8024cf06d3f4db148d38c73581499b25f99713e844464352c6adb20c7542de
SSDEEP
6144:p1gUYafH+GoukVmu7ub2kU8xN7O555Q/zVVPoNFUQI6fhIOvVvL4h+4KMEQk5rey:EUPH+Gosb2kzOVQ/Bpg0vOvVv+S+Zo
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b82799da2ba769460e743cdbc524c985_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetNewInf
GetNewSock
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE