DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0cb7228ea6b920142e4ac07b7b5d520e_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0cb7228ea6b920142e4ac07b7b5d520e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0cb7228ea6b920142e4ac07b7b5d520e_JaffaCakes118
Size
94KB
MD5
0cb7228ea6b920142e4ac07b7b5d520e
SHA1
d940e7f69fbc5c2a5dbc6e70ab2617751bae6dee
SHA256
5ac77aeaaf5e83a557767aa84a9683ef04297d5e2722047c7d9f000d63054702
SHA512
cd88b4075e5daa89ee5b6c37ff56140d9cace3ff4b217e4cb1908a56299f3c18947bee24e0f43417c1007aba7cccdb41ecaa1d1142c9c1bab7aecc8ac34bf433
SSDEEP
1536:ucoMuWjFlJl/+OTntdY7rjsCmKPSewnyfsck9DbzjQ5:RZuwmwntuPgySewnXcktb3
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0cb7228ea6b920142e4ac07b7b5d520e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE