StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
04cd1e9d9c3dd262d7570eb787f794dd_JaffaCakes118.dll
Resource
win7-20240903-en
Target
04cd1e9d9c3dd262d7570eb787f794dd_JaffaCakes118
Size
684KB
MD5
04cd1e9d9c3dd262d7570eb787f794dd
SHA1
27f34aebc016866b68783c0517768957a8522afc
SHA256
7926ca8526bacb814d9eea0b5b0011ac5ae5c953d8cffb08c9bf321ef52fefc5
SHA512
857a58ddff40d8db286336a75dbcf10e05bbb3161e59954a205b292e45ac67347c6343fcc8a6c2353fd08ad9e45f67909681aa1decdcce6cdeedc7a599d89a2a
SSDEEP
12288:Pcr15LU3/bZ8fyOYA0rw7qzPHJmJTGpEgdnxv3u3vIycv3A/S4cI3wEYG7:+15U3jSfyOYA0cOIti+vITARw67
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
04cd1e9d9c3dd262d7570eb787f794dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE