DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
08e975c396194e895895868bcea1c705_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
08e975c396194e895895868bcea1c705_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
08e975c396194e895895868bcea1c705_JaffaCakes118
Size
66KB
MD5
08e975c396194e895895868bcea1c705
SHA1
e525c5f1521c466b9aa505a879fb3b8c98cef338
SHA256
04ca3ae6888fc34b219a021b88efd59dd965c5bb544df3cbef8c64268eac11b2
SHA512
92db8744394c65842e929648b4aba0ec080c696e590842b117f4f9805c5597f4ac3b194352e58affbbe110b8390d8e27f6fb82cf62081c25f53311e4c0a387d1
SSDEEP
1536:wNPyqpO0OvsdVybTd2SDONZx85Mi126atetAE/aGr5:kJIIytSD2tAwa
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
08e975c396194e895895868bcea1c705_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE