DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
0150a39606c9af518c143af865c2caa2_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0150a39606c9af518c143af865c2caa2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0150a39606c9af518c143af865c2caa2_JaffaCakes118
Size
356KB
MD5
0150a39606c9af518c143af865c2caa2
SHA1
e07da86cd6a51cc1188eb90e0bb02ff9e9d388a0
SHA256
3de6ee9d7287d72eb7c958bcfe8a6b30faf5b51813f9c7f50fadf55971cbfa32
SHA512
4364730dfc3a144a99fb6024d813105c921e7044e0dcba1b4df34e2aa2876edc21587caf81804594b8a1cb28034ccc0c664c7aede082846181ffd5f66cb30b7c
SSDEEP
6144:pIcUX8ak3ev0hI966AGkAjOpoaY7XvPt96fc4n/FOrVP8Ke8mpx:+cUX8r3eUq6xGJOpq/31fef7
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0150a39606c9af518c143af865c2caa2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE