StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
06aed2363dba1c9f4fff8c628a236e5e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
06aed2363dba1c9f4fff8c628a236e5e_JaffaCakes118
Size
684KB
MD5
06aed2363dba1c9f4fff8c628a236e5e
SHA1
3358aecdc1513af2f85a3fba8005a56db24870e0
SHA256
aa5fbd8c96ed54508acb9b8e5ae76f7eca02947d18d95eeabe40aba8a1e64686
SHA512
435254fe237d503d5969140469f7b387a6b6ae155bde6ed9aec26d965b6ba24a6e8fb6206da4b2fbe42a4f6d545f5f09426aa1934d839600e8138bd401c7df8c
SSDEEP
12288:Pcr15LU3/bZ8fyOYA0rw7qzPHJmJTGpEgdnxv3u3vIycv3A/S4cI3wEYGY:+15U3jSfyOYA0cOIti+vITARw6Y
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
06aed2363dba1c9f4fff8c628a236e5e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE