StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
0446f7fb142093fb2f1660162e35ecec_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0446f7fb142093fb2f1660162e35ecec_JaffaCakes118
Size
632KB
MD5
0446f7fb142093fb2f1660162e35ecec
SHA1
f6ee50b6f196f9c1469a67387fd6c097a0e2ca7d
SHA256
685d4bae127b9f29127e01c7e5eacca51afb6ca56fde9cd2b82becc5b985ccf1
SHA512
193493b23f0e078ace0d42ffe19fc7313aa9f2abf0f635e0bafc8a8e4fe887773e349e3af695c316c8f3650c2a9245b177478a8ea4eda36d244eac5d1db9c577
SSDEEP
12288:3e2exi93lS2zv4iuqzPHJmJTGpEgdnxv3u3vIycvjVREybSr:3Vexok2T4i5Iti+vINmybSr
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
0446f7fb142093fb2f1660162e35ecec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE