ServiceMain
ResetSSDT
Behavioral task
behavioral1
Sample
JaffaCakes118_5981a1e846399ee3087cbd7aca8da54c.dll
Resource
win7-20240903-en
Target
JaffaCakes118_5981a1e846399ee3087cbd7aca8da54c
Size
390KB
MD5
5981a1e846399ee3087cbd7aca8da54c
SHA1
8067a0c7210e0012804402d01e746fc34166099b
SHA256
1e9e3236c3ef753aaa835695f1484ff37b4fbf3756e63b71f1836c28a8d2573f
SHA512
4d7fb2f3d787a326def3f99864bae9205661caae047783fcac679ad43ad3abc3df7190579020231074a9436fc8dc6caed4b8f0078c8b7394dd391a63b4df2028
SSDEEP
12288:rl0Jn8F3Z4mxxJeBDbLf0afdG560lPuJjA:h0CQmXJeFLx1M60lP2A
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_5981a1e846399ee3087cbd7aca8da54c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
ResetSSDT
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE