LoadService
RemoveService
Behavioral task
behavioral1
Sample
454e9f2808c68a83b9bfeba0013149f7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
454e9f2808c68a83b9bfeba0013149f7_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
454e9f2808c68a83b9bfeba0013149f7_JaffaCakes118
Size
280KB
MD5
454e9f2808c68a83b9bfeba0013149f7
SHA1
cc18d24291c98477bef7e5b3b3b62f4e01252541
SHA256
679d059db4c38ea75c74d08b14d30c8f40c63a7fc883d193a5a64c75de64cf1d
SHA512
5e7bb107768f17d259b810a59e0bb789581928c2c90a44b852d082ecd46ed14663c05cd521c777c147e4f086e5b5fe3f80f62770c978ff849666c4b3b95c5571
SSDEEP
6144:1RooJLp2HKyqtf84+tsSM82cmWZtpXlV9lzuZWNhCq5WYH:1Rj72qZt0+S2WZbfjvN
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
454e9f2808c68a83b9bfeba0013149f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadService
RemoveService
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE