GetZipDllPrivVersion
GetZipDllVersion
ZipDllExec
___CPPdebugHook
Behavioral task
behavioral1
Sample
fe43b34a5acdc1fdf2316fe7d9eb0972_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe43b34a5acdc1fdf2316fe7d9eb0972_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fe43b34a5acdc1fdf2316fe7d9eb0972_JaffaCakes118
Size
69KB
MD5
fe43b34a5acdc1fdf2316fe7d9eb0972
SHA1
f867a71ab8ed7aae8741027dc0269ef8bea81f36
SHA256
7092aa2c4201ea11fdf16c92dee0c167f3b2401d21222cc1bf102a33e6ee0796
SHA512
9d3e02c18c69ad72cac5e09f82829fe7634ff87b94ae1c5ebe16ac654d7c70f49873731c8a7a399a96964646895b45f636cc651730958a54e81724b9453e4503
SSDEEP
1536:P2EVxaEjtK8kRjhZrygasS4GqMuQGUvr54JcJ6Sny:PHfK3hZryKj9UvriJk67
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fe43b34a5acdc1fdf2316fe7d9eb0972_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetZipDllPrivVersion
GetZipDllVersion
ZipDllExec
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE