My_ini
StartHook
StopHook
Behavioral task
behavioral1
Sample
ff352b564016840c18cd666ffde0fc8c_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ff352b564016840c18cd666ffde0fc8c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ff352b564016840c18cd666ffde0fc8c_JaffaCakes118
Size
413KB
MD5
ff352b564016840c18cd666ffde0fc8c
SHA1
1d02a15271712b5e92bf161f9553dc89b00beed0
SHA256
1abe3d81b3628e08d4220388531deee7cbf6a4001ffe503d6e2cfdd7ed7cdba7
SHA512
c274e50418f238ac5f5c6debc2ec82348218abac86f97484ba53e3726f01c2f1bcec206266f5842aa1a3997ddbac5cd1673a85b59ac3d73986db13e7b467d7fe
SSDEEP
6144:n+ZIyvbAXj7UT5cI4c8bKCW3e0dZfFgCZTdsmnEliQDWf19nXA:ni30T7Kaj81dTdxGmnOhDInXA
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ff352b564016840c18cd666ffde0fc8c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE