StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
066c095a3910f80d5170024b5463cadd_JaffaCakes118.dll
Resource
win7-20240729-en
Target
066c095a3910f80d5170024b5463cadd_JaffaCakes118
Size
611KB
MD5
066c095a3910f80d5170024b5463cadd
SHA1
01cd746a4d9fda2e428209100197398a2e9ffced
SHA256
d29cadbf4d9c168a033b9b7fc834b3f7cfffaeca371a05a57d6e5a74546219b8
SHA512
84dee814f4e8da073f3560792eea5868b159814df5d6b55bb64ca605b588bff0055e831dc4c8374d1dfccf2874636ae45cffceb4c9c94d286acc682b3a9480d5
SSDEEP
12288:o5yMrLVmeIqzPHJmJTGpEgdnxv3u3vIycvKEEBo4njUc+Yz:9IrXIti+vIFknjU0
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
066c095a3910f80d5170024b5463cadd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE