ResetSSDT
ServiceMain
Behavioral task
behavioral1
Sample
ef6d1f81ff20e57b4e91dc944753d517_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef6d1f81ff20e57b4e91dc944753d517_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef6d1f81ff20e57b4e91dc944753d517_JaffaCakes118
Size
366KB
MD5
ef6d1f81ff20e57b4e91dc944753d517
SHA1
e9dd27e5a657104cdf52457bdbb6cd41dbf2dbe9
SHA256
ca92d2a2708299de13db9798799f9acda34e2259089b545dcb7effae65d868ee
SHA512
109d7bbdb80ad15185c77df8af456edcd1223aabdb8591516df3fcf932f0dae01c6a70b030dcccc35961d00e1899e7540efedf16f680c3c29b1cf65a5afb610d
SSDEEP
6144:tkxptmmtfF2idZecnl20lHRxp3glCXsKhDqAamQ233xzTMbF1ekDjLg:aFb7F3Z4mxxrXsCemDgZDj0
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ef6d1f81ff20e57b4e91dc944753d517_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetSSDT
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE