HookProc
InstallHook
UnHook
Behavioral task
behavioral1
Sample
bcbe0b033ad9f3a70ed8a416ab8918d8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcbe0b033ad9f3a70ed8a416ab8918d8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bcbe0b033ad9f3a70ed8a416ab8918d8_JaffaCakes118
Size
204KB
MD5
bcbe0b033ad9f3a70ed8a416ab8918d8
SHA1
cba04e5be093f2a53ae250dcdf0be91f4798fc7b
SHA256
1d67f7020343c6fad03c0155bce1f8feec505ebde9f683d2bb9cb1ff60746673
SHA512
de552746b62d4938ba0733c9fcf9227b32a5741ccfd30407a180c31d76e29e5da54164c2fe6119e541f7f8f02996c9b975cfdd1f922e5297afe081c73e22a9af
SSDEEP
3072:vYZMLXgneRetpsBgYDe2LpTo6v6pCz5wycKDuve16NF73xj7i/:AOgnEv/lMgiCuOO73d7U
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
bcbe0b033ad9f3a70ed8a416ab8918d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookProc
InstallHook
UnHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE