DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
038e43895040be3e92508d50add86d6c_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
038e43895040be3e92508d50add86d6c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
038e43895040be3e92508d50add86d6c_JaffaCakes118
Size
178KB
MD5
038e43895040be3e92508d50add86d6c
SHA1
84599de76213cbaae160fac41c60ca1d75f6ffea
SHA256
790024d29a72d50dc8694e3fa3ed1babb4158aa2e01f6a787f2dde0955f3261e
SHA512
524fd678cdfa85c5d519aab1ca8203e1d372fd8d0adc938a473897ac67df035cf39f9c36643dfe34dabd4e248b133099b85cc305292262e7dfe322d36fdc33d6
SSDEEP
3072:cY0c4M0dW2JjRhhAgjJNyPJ35DAa2SbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhP:L4M0dWIbhtn25wvP6bQ7yMP+DE8271vf
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
038e43895040be3e92508d50add86d6c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE