DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
060d1c066e398063871d42ed9b52e2a1_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
060d1c066e398063871d42ed9b52e2a1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
060d1c066e398063871d42ed9b52e2a1_JaffaCakes118
Size
176KB
MD5
060d1c066e398063871d42ed9b52e2a1
SHA1
f12cb2b4cc29b3480c56a853b573e06b61d58348
SHA256
e2eecf4eb33cf3ba191a2f71a422c6e0394ab048af8f53679ea2fc41659beb9a
SHA512
51808345ce26c41af75eeeb50e6ae6c532c292cc6debb9e43c4bd83670622e2cc7b139a362f0c5716540ae5a2fb8dea96d91a03e61b638e6a0bfa53ce1cb49fc
SSDEEP
3072:w2LNJjG7mq5Z9sgZDobfilgsVIcbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFy6:RQmq5ZR9ooqywvP6bQ7yMP+DE827c2Ck
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
060d1c066e398063871d42ed9b52e2a1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE