GameMemoryWrite
SetAuditionHook
Behavioral task
behavioral1
Sample
fb5dd3d5859e27f6e1c19ce9d288a61a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb5dd3d5859e27f6e1c19ce9d288a61a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb5dd3d5859e27f6e1c19ce9d288a61a_JaffaCakes118
Size
16KB
MD5
fb5dd3d5859e27f6e1c19ce9d288a61a
SHA1
2d9e1b32aadf37bd0b7fcad6ee59c6fd1d127b05
SHA256
4c45baf727f111755e3b001b89bb4699ac193c028b58b32843744b36a0d02f5a
SHA512
8402e686bb7cf99afeda2abc9e7c72877defe7329ed57779445244db6d63268066e6f8e9d473bf3437e7fa1ed0073404e49e3b241c5a933d3da33b1ae539a4a1
SSDEEP
192:C3VShWPtAxfwCMrpY7S8LqPZo5LdCfuR1nuO3PmUWhfw4:mwhWAxfr6+S9Pfu7n5pWq
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fb5dd3d5859e27f6e1c19ce9d288a61a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GameMemoryWrite
SetAuditionHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE