DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
04672281e494a1bc68183dabf51d1dcf_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04672281e494a1bc68183dabf51d1dcf_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
04672281e494a1bc68183dabf51d1dcf_JaffaCakes118
Size
181KB
MD5
04672281e494a1bc68183dabf51d1dcf
SHA1
466132bd929f03d1779ba5f6f3d64239e0cad98e
SHA256
c1be07d8369d48cb72afc67b6768a6c3dca24326033a318c496d6c79508ab05f
SHA512
3a0d1782109a3cdee7001238a28bf70dd114eefc63e363c95f07d5c634e44dbd05125585f80668f918694785c3928f51941cd6614b75a645f44089fb78fb47d1
SSDEEP
3072:zkX1Ml904wtjvAnIPcl1g+vp33kDbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFa:z61A90DVvA3yLwvP6bQ7yMP+DE827EF/
| resource | yara_rule |
|---|---|
| sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
| resource |
|---|
| 04672281e494a1bc68183dabf51d1dcf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE