StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
0016345e8420d3ec470386f26d369c84_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0016345e8420d3ec470386f26d369c84_JaffaCakes118
Size
684KB
MD5
0016345e8420d3ec470386f26d369c84
SHA1
1a42cb5a44907cc9a27c172531ce64556c41f99c
SHA256
a01b765a90411470e1c987e65eafb594dedfd5c4f69d1f0193ec078596dd6fe9
SHA512
eb0359441d2fb014f91bbc40dfc6b1707c82dec29595ad3907575481a062d182c778c34b1d208e53d40b18d2df8de1f183ad7ec7bfaab66164be1d17c36763c8
SSDEEP
12288:Pcr15LU3/bZ8fyOYA0rw7qzPHJmJTGpEgdnxv3u3vIycv3A/S4cI3wEYGz:+15U3jSfyOYA0cOIti+vITARw6z
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
0016345e8420d3ec470386f26d369c84_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE