D��
DoService
ServiceMain
Behavioral task
behavioral1
Sample
fe86434a0a9a3ba8f5e86645c6b8cc6c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe86434a0a9a3ba8f5e86645c6b8cc6c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fe86434a0a9a3ba8f5e86645c6b8cc6c_JaffaCakes118
Size
304KB
MD5
fe86434a0a9a3ba8f5e86645c6b8cc6c
SHA1
1c3043e8eaf7a8205b86094c15b86dcdceae7376
SHA256
916efa990c7e183070cf0abfee87aa5eb1c7528213dfa79be8dd5a9e8f34dc5d
SHA512
c0c0066ffc9f5508767a58dd88bccb15f21a6c0d832864e8a94f1b22c2a2a554b9c4ddcef8258da76f7c9729f19abb0fc474b8f67f93053c65c9307372c4a83a
SSDEEP
6144:wpMhIxYEB81cNwPLvoqg0R2VhPefm0To/ewMyJUyUIpPW8MamCidw:FIG1c2obY7DGUwiw
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fe86434a0a9a3ba8f5e86645c6b8cc6c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D��
DoService
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE