StartHook
StopHook
send_en
Behavioral task
behavioral1
Sample
0958f0b62cb6ad33d9f60d2df56eb209_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0958f0b62cb6ad33d9f60d2df56eb209_JaffaCakes118
Size
684KB
MD5
0958f0b62cb6ad33d9f60d2df56eb209
SHA1
d73329bc515a5d4f1d3316167beae68a4c1ae636
SHA256
dd209523f097f9c3ab9a30be68fb3d07491bdbee91d8fe3efe43f54b16f8c7cf
SHA512
10e1774fcbbe4f8f92066ae56ede5a6ebd236985dd8fe551abe7dd20f6224d69184f575926a5a230e4bb06ff9e79e1a1fd190911e2b5e70cb4018bb25166faee
SSDEEP
12288:Pcr15LU3/bZ8fyOYA0rw7qzPHJmJTGpEgdnxv3u3vIycv3A/S4cI3wEYG3:+15U3jSfyOYA0cOIti+vITARw63
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
0958f0b62cb6ad33d9f60d2df56eb209_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
send_en
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE