DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
03d3636899a3d7e8a96b69db5db619d9_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
03d3636899a3d7e8a96b69db5db619d9_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
03d3636899a3d7e8a96b69db5db619d9_JaffaCakes118
Size
181KB
MD5
03d3636899a3d7e8a96b69db5db619d9
SHA1
3c3f5eeda71e076b18cb33944b3bac7f04f9f95d
SHA256
db0473d44573e66ec64af1a6812dd1c78bfbc9bb2ef7876b2916f54c3baa18cf
SHA512
4d167942dec8477f95ae33ec0fa975899602f766773b04349473ca9184032928c69880ccaf021c6d4b9e07e4b32456d662e899c1ff77595c9e6dc084f45c6b4d
SSDEEP
3072:f0trMC11xu4ramDF5UTc8JbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU758Q:ct4Cx2a8RwvP6bQ7yMP+DE8275qvY
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
03d3636899a3d7e8a96b69db5db619d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE