HookOff
HookOn
Behavioral task
behavioral1
Sample
bb1f5e236c4b38bfbbdeab4a27e20476_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb1f5e236c4b38bfbbdeab4a27e20476_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb1f5e236c4b38bfbbdeab4a27e20476_JaffaCakes118
Size
441KB
MD5
bb1f5e236c4b38bfbbdeab4a27e20476
SHA1
62ce466f52115e9f0d0412b6bf3880339882dc0d
SHA256
1bae2c51810afc780c7555476e959bea35802e3c1678d3d6d2ceb45078b379db
SHA512
5cef291fd0431828d5180ddbf194d767fe563c14a29df00a080b41b0ead887c8f0a66c1922ae970ef63c8ffdddb926347a798e091eac07cf21db31b26ef4d1e0
SSDEEP
12288:tiI0ZxTvtA4nrv8AYGLbwcJHNSl31NdUgM:teC4nrvfzfwcJHMl31bUgM
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
bb1f5e236c4b38bfbbdeab4a27e20476_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE