CreateHook
DeleteHook
Behavioral task
behavioral1
Sample
53d5d6a64e3af709a062af1a5657aa56_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53d5d6a64e3af709a062af1a5657aa56_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
53d5d6a64e3af709a062af1a5657aa56_JaffaCakes118
Size
148KB
MD5
53d5d6a64e3af709a062af1a5657aa56
SHA1
ffdfb9b7aa70022e3e954dccac8ff94ea4b84933
SHA256
67f96900367bec004d83fb7d4385e81134765d04aca44b3b937417b88ba07ebf
SHA512
64f7d34bc6df3cdd30ead30baed6efc0eaa0e17b7ba47c7965dacc1ba18a085c973b0dc9ac719dcf98087984e75879a1805df9bd222ab9a162f14bd6b8c6df07
SSDEEP
3072:ZL96HM0XUGXU2Fo21364EoiJeeI+StSqYLj8MfseRa11dbZsM5tk859:ZrnVW5GJZ2tNYLj8Mfspd7Q+
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
53d5d6a64e3af709a062af1a5657aa56_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CreateHook
DeleteHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE