DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
e8f30fd945a6b43e3b3205923fabba37_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e8f30fd945a6b43e3b3205923fabba37_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e8f30fd945a6b43e3b3205923fabba37_JaffaCakes118
Size
155KB
MD5
e8f30fd945a6b43e3b3205923fabba37
SHA1
998c131679fab5137394a113bbdfa99aba5615d2
SHA256
6bba0a7d641b90ca3577f3df7be1d0b863edea86f262758b3e52218b1cde680c
SHA512
730112d00acde57d48504bc9633f69e587207b0fc13481c959b9d2b14fddcfc4a661b1d7d3196dcdb64292f87825b731dbfdf708e03a2adc921e5c30128867b4
SSDEEP
3072:G//m2lcI9ZkQd+e+MHbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7Iy3pxVa:G//m2V4M+a7wvP6bQ7yMP+DE827bz27L
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
e8f30fd945a6b43e3b3205923fabba37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE