HookOff
HookOn
Behavioral task
behavioral1
Sample
42f8faebcf46386d7c259ba15495af1b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42f8faebcf46386d7c259ba15495af1b_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
42f8faebcf46386d7c259ba15495af1b_JaffaCakes118
Size
51KB
MD5
42f8faebcf46386d7c259ba15495af1b
SHA1
1005d015fb4afc3ea7f5e675240acf415b6ab3ba
SHA256
722e752dfd2b0b98f64fe409a97fadcdc7c5a8a43bae7ca7872d8ccf0bd13771
SHA512
c8d600639f000cf8371d8b385c94f0dbe74dee444cba8ab5653fc285baca132a19c692e834b069f59519343ba3adb964b39a80197fc10c05e9e15d6c498debcb
SSDEEP
768:NkEKODZXmv2YZEEj7fMkMYqx++MlAzP7oiRe22m8OM+o/Tk71+yS9ecoewmy6rTU:uEKjdfqYqx+Cz7oI2Nt+e2YkbN63SS
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
42f8faebcf46386d7c259ba15495af1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE