DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
06d87708b724d4304eab8c1534a8fa7a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06d87708b724d4304eab8c1534a8fa7a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
06d87708b724d4304eab8c1534a8fa7a_JaffaCakes118
Size
185KB
MD5
06d87708b724d4304eab8c1534a8fa7a
SHA1
f5b9e0db38b5570e86fd0d91a0770a909aafb594
SHA256
3c09a569ce08dc9c00f08ee955830a59f327b801b6d10f92b7747494b5638ccb
SHA512
94f22963bd3b526972d7399af794b0b1047afaf4f35245b448f5063e93fba45dbcbceaaf465da5affa8e1f056211fd27f16db21d4909d20456f4fa34b15aca81
SSDEEP
3072:RJQ3ox3XPjpHO+8VS4lbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7DM9HF:RC36rW7FwvP6bQ7yMP+DE827cHF
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
06d87708b724d4304eab8c1534a8fa7a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE