StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
03ee57453d69bc09304451d16aa58222_JaffaCakes118.dll
Resource
win7-20240704-en
Target
03ee57453d69bc09304451d16aa58222_JaffaCakes118
Size
684KB
MD5
03ee57453d69bc09304451d16aa58222
SHA1
a4316abf41685e909f3cdc178e45da5227212ad0
SHA256
bc78d7aac36cc756b67d0d2cccd3d2afbad34764d026d3181dfb35293f6803d0
SHA512
7f6889540065e0b8d5676519d9f3e7c2ddd0339c315e81dd4d0035cb741ef18e073c1c4a0e74d3e69cd219e20c5a34f2ee0ff9aee28aac10969ad7b9849375ba
SSDEEP
12288:Pcr15LU3/bZ8fyOYA0rw7qzPHJmJTGpEgdnxv3u3vIycv3A/S4cI3wEYGE:+15U3jSfyOYA0cOIti+vITARw6E
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
03ee57453d69bc09304451d16aa58222_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE