DoCreateMod
DoInst
Behavioral task
behavioral1
Sample
dd47fef5593b20193f9abe62d502f8e4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd47fef5593b20193f9abe62d502f8e4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dd47fef5593b20193f9abe62d502f8e4_JaffaCakes118
Size
222KB
MD5
dd47fef5593b20193f9abe62d502f8e4
SHA1
bd81d16ad8b25ec0328e0814c3b05eae02a9a93c
SHA256
7318344be9c9fc1ed57e7daef36bb11656232befcf5c441cbbf344a44fb8b32a
SHA512
f9d06101470db5d086db57d2800b951e28e00af5bf7f6d317b81818b384c1a33c4b4ed361ff1ad92a9fa0f4b5f7a23b052b6e07cb37d7cc9b5764a779c9b658d
SSDEEP
6144:vRvjS7YsmKkyUzOYPrBg5LbBH10H1x5537fq:5vjqqKczO8uBV+zi
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
dd47fef5593b20193f9abe62d502f8e4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DoCreateMod
DoInst
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE