SetHook
UnHook
Behavioral task
behavioral1
Sample
43b708438a5b98e27e2b155b0575a4ca_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
43b708438a5b98e27e2b155b0575a4ca_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
43b708438a5b98e27e2b155b0575a4ca_JaffaCakes118
Size
62KB
MD5
43b708438a5b98e27e2b155b0575a4ca
SHA1
e97e1f95b69594da3047689afdbfa5877ce9fa2a
SHA256
e9a6daf5e8801afd5cd18344ba2528de1d7a9037217fe5c809fd9c28da3c1537
SHA512
3fcdbfbb4f85ccb44391fbddc4555c2dbaf0e184ce0f4ff405a875f89fa2c180084365678bf59b7123052fccdd8e3a3770684d566fb0547debc8269562b11887
SSDEEP
1536:ymupl9pDQA56XS+tcTbr8STIlounDzs1L4oFBlJpa3yXlj+A:mT76XS+tcvr88uc7FBlJpaXA
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
43b708438a5b98e27e2b155b0575a4ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SetHook
UnHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE