DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0576464b0f1c3ade35e1a32e1728a1a9_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0576464b0f1c3ade35e1a32e1728a1a9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0576464b0f1c3ade35e1a32e1728a1a9_JaffaCakes118
Size
137KB
MD5
0576464b0f1c3ade35e1a32e1728a1a9
SHA1
0208cc43e5e6703c49a4ecd9780684a2ae96759c
SHA256
cf74376e2f5f137b5ae2ad0380bac433cc91381f3ad32fac9f267726be02d34e
SHA512
b0b738bb2478f1020ed82307b71668ab1534a8901c2827cc31104cea2f82ee38cfab8568718b332dc39632e50574d900398833f24196a7392c88f19d85554462
SSDEEP
3072:SledwhL97NaDbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7CO:9dY7afwvP6bQ7yMP+DE827l
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0576464b0f1c3ade35e1a32e1728a1a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE