HookProc
InstallHook
UnHook
Behavioral task
behavioral1
Sample
f63643970bd721de683c33429a97fbc3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f63643970bd721de683c33429a97fbc3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f63643970bd721de683c33429a97fbc3_JaffaCakes118
Size
30KB
MD5
f63643970bd721de683c33429a97fbc3
SHA1
ab20e4284d1da47f2d9c88eeae93046d6b0be942
SHA256
67f34f51ae46a65e08d9b992d469f0fd6e7e5e8b5952826ae3916970c87f7c33
SHA512
e873357d3c70bd2e699832b674fb0ca9c7c2e351ac5b6edeb9cd9b6d1ffc14d33fd9f53be0ec5c40952a5d06697f67322af548725907f012e5903485cea31cb2
SSDEEP
384:mexIVsD9dt7GJV44LqMDrw48aEbD5T/XYUdlw+ohO+ksjcDRmi9Axnr6+S9Pfu75:mQIyD9T6Q4O8r7qVhw+ohenRB2xGdeV
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f63643970bd721de683c33429a97fbc3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookProc
InstallHook
UnHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE