DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0af01c2d356e9ba4d65fc178f83373d9_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0af01c2d356e9ba4d65fc178f83373d9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0af01c2d356e9ba4d65fc178f83373d9_JaffaCakes118
Size
845KB
MD5
0af01c2d356e9ba4d65fc178f83373d9
SHA1
dde205747d0041dfc5acbf04e8e73fb1107be96f
SHA256
19a84db80de3323f507fe3508f65d0a395913573aa45cbe9d010ba99b84a0222
SHA512
3e3dd21ae4b6670d462d7d95789cfc68773c7d6a895cf42e822c5cbf6fedec9f513117b7fcff5bd1f6599c0edb882524dc553530bedc7cd7c90536a22d9d30ea
SSDEEP
6144:uL+n5KD3vLyBqfW2Kn7dt+6ALL932vdaNBZDeeeIO4bp8n+aC1meyUGimMXcgIgE:u6yjgn7dAmKZ1O490W1meyUGpM/oK4b
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0af01c2d356e9ba4d65fc178f83373d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE