DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
06f5baefebab9617b8ba535f3d282a9b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
06f5baefebab9617b8ba535f3d282a9b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
06f5baefebab9617b8ba535f3d282a9b_JaffaCakes118
Size
189KB
MD5
06f5baefebab9617b8ba535f3d282a9b
SHA1
6c3d535e045d87b3a521cdecf5bb45ed8b49eb5e
SHA256
d62c8a197670cdb7048b32f3a8db2dc88d739a926190fdb71aa4af466f08cd94
SHA512
fa9e01621aaddb3e2217135481edb8f4153b179f4eab1a6ebe5024aaf94a033d44cef50718079db79f60067182b808885c2742525deb6d7bef602530cee4e1c8
SSDEEP
3072:9xB3Lr4di3uqMCURTwoURbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7XHSK:9xB373uJf1BIwvP6bQ7yMP+DE827XyK
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
06f5baefebab9617b8ba535f3d282a9b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE