HookProc
InstallHook
UnHook
Behavioral task
behavioral1
Sample
395502ef661902f41ff2fec63db2e4e7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
395502ef661902f41ff2fec63db2e4e7_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
395502ef661902f41ff2fec63db2e4e7_JaffaCakes118
Size
204KB
MD5
395502ef661902f41ff2fec63db2e4e7
SHA1
933c4c9db8f36f0329b258768ff07890da96015d
SHA256
e9d27c8142e02652025debea39517f4ddcdad0cf1df43091e30b8b7da71608e4
SHA512
4495ec88b0764ab0de33edea9c0e58a531251f68d3af0aaecbc0048a8f905a19a98620e436ca6cfdb477d88e422116dd68e77cb8abe949d7e29c39a3b9a01e4c
SSDEEP
3072:vYZMLXgneRetpsBgYDe2LpTo6v6pCz5wycKDuUf16NF73xf7i/:AOgnEv/lMgiCuuO73B7U
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
395502ef661902f41ff2fec63db2e4e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookProc
InstallHook
UnHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE