___CPPdebugHook
_removeHook
_setHook
Behavioral task
behavioral1
Sample
df9adf8bfb27511e3102453dd05b3f48_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
df9adf8bfb27511e3102453dd05b3f48_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
df9adf8bfb27511e3102453dd05b3f48_JaffaCakes118
Size
298KB
MD5
df9adf8bfb27511e3102453dd05b3f48
SHA1
ef13ba6fbd4a11fd744590d61f82ed3d4f340144
SHA256
617760ffe6072ba230d70a97cd76224077821e3a3bb6526aaec1b4ff211393df
SHA512
147c2e92e85faa598c461b7ee5b7636236acedb52ed27a18de0ea12fe81f5e858ec8d790a18ff00188c25686e6313ed6a010737bd64ec8df83cc6dab9cb26eb0
SSDEEP
6144:pJQrk91cNwPLvoqg0R2VhPefm0ToU0K6IG5yKvkpRw02qr:PQrk91c2obY7pCIky6k3l
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
df9adf8bfb27511e3102453dd05b3f48_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
___CPPdebugHook
_removeHook
_setHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE