DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
65a7b9b69bfe6a3135415ee127736a6d_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
65a7b9b69bfe6a3135415ee127736a6d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
65a7b9b69bfe6a3135415ee127736a6d_JaffaCakes118
Size
739KB
MD5
65a7b9b69bfe6a3135415ee127736a6d
SHA1
cac21990d4222bef5d935b788716af710e9ac7dd
SHA256
55bcd6cdb00b83a021b2f483de5e429e111e13d608bd35d315c60d5cb1bd8fe6
SHA512
1c70d59d1a4ffe9c2ad15edbaadc9015af3db2acacd0e4bae5f10e822994953a66924da523a041b534e3c7deadffef268efd7988c202f4b04a999ea1df3df2e1
SSDEEP
12288:7t7C0Q/P9cdEXF3Z4mxx9cOTpwRZCOTPJFKN3WDzDxn4ZAQsU:5ut+d0QmXNT2C23CwfJ4ZAPU
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
Processes:
resource |
---|
65a7b9b69bfe6a3135415ee127736a6d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE