StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
049498247c2d6039f6c6ee625c77cc08_JaffaCakes118.dll
Resource
win7-20240708-en
Target
049498247c2d6039f6c6ee625c77cc08_JaffaCakes118
Size
684KB
MD5
049498247c2d6039f6c6ee625c77cc08
SHA1
ca6a020d9869c491d2caa9ebc967a56c9d5122b6
SHA256
bbcc940772578f5ee3ea86533720b1827fd9fbdbc25b9dfc5817fef6bdaf1d21
SHA512
98e276c67bc17c5aec6bbc945645dea134141ccb0cd86ecf2ad3dabd3c409d54e5b0768f2fe436b8695b4537fb6aa77b48e6a9bc116ddf71158747f962ffe135
SSDEEP
12288:Pcr15LU3/bZ8fyOYA0rw7qzPHJmJTGpEgdnxv3u3vIycv3A/S4cI3wEYGg:+15U3jSfyOYA0cOIti+vITARw6g
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
049498247c2d6039f6c6ee625c77cc08_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE