DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
00e4f0b47f62991ce4fac833e8438182_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
00e4f0b47f62991ce4fac833e8438182_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
00e4f0b47f62991ce4fac833e8438182_JaffaCakes118
Size
175KB
MD5
00e4f0b47f62991ce4fac833e8438182
SHA1
c1bc475f23b3c16bbf25cb82292c19de2011c81c
SHA256
4b8f31844bb54f72bf31eea4a9107ad5ecbe220f58f64de7703ff9444aa437b9
SHA512
d202b1a069e3c37befa133382a0f6499e99292a9788a8a58de7da77d6b38ef9d95b04920881ffb74e0440e5c3821ed49d1d7cde61dd7dd668bedaaf84be40285
SSDEEP
3072:c0B8VTBdpLlhhvtzJ9mWbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU77fxa:SVXRlflznVwvP6bQ7yMP+DE827Txa
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
00e4f0b47f62991ce4fac833e8438182_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE