DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f979be2834bf3dbb5ae4a21033552adf_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f979be2834bf3dbb5ae4a21033552adf_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f979be2834bf3dbb5ae4a21033552adf_JaffaCakes118
Size
180KB
MD5
f979be2834bf3dbb5ae4a21033552adf
SHA1
1e4ecc3a14efd4b1a73acd5400b93134a43e9ec5
SHA256
b73886216facb5f15eb4f36d88e4facaf682811be3eb8ee59b80142c56725595
SHA512
1ebd15c35bde36fb8bad72e71d24e7fe03f1b7dd78207607d75b7d72f81bbb09b2addc1cfb7a84073c26a47117cb89dcb63119f2e3dd01fe6ba332188c3de36d
SSDEEP
3072:GXrbHhrNMU8aKsmVzo9q0uNK6bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVUE:G705MNKdwvP6bQ7yMP+DE827zyCC
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f979be2834bf3dbb5ae4a21033552adf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE