DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0326aed68eedea71da9debfefe443182_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0326aed68eedea71da9debfefe443182_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0326aed68eedea71da9debfefe443182_JaffaCakes118
Size
176KB
MD5
0326aed68eedea71da9debfefe443182
SHA1
7eddcc019202dd630ee07c119fa9ba847421a0ea
SHA256
16e5b5a026b204f53fb8054d28311e4eb70afd1dcaed794dc0aefab2753b8fbf
SHA512
4062a3a2cc84ffc8a94e3c16369b128d94c088a57f362cf7843222ac490e1caca5fb4d2ad54ed3ecf740af5970cbd92a3a1c1f6bafc7e8d304944d75521cf8f0
SSDEEP
3072:rJvtDsHxFqBs884XLxTPbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7OyBIT:FvtBBsTMwvP6bQ7yMP+DE8271s
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0326aed68eedea71da9debfefe443182_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE