DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0d1aa65256c4dcdbad6d1a489770aa7c_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0d1aa65256c4dcdbad6d1a489770aa7c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0d1aa65256c4dcdbad6d1a489770aa7c_JaffaCakes118
Size
322KB
MD5
0d1aa65256c4dcdbad6d1a489770aa7c
SHA1
0c4911be2eb76145fae2e453c5717de008333ff7
SHA256
afef6d782af877b29b54f10472c4748f7f7b4396769eda62465f8e2ca26414cf
SHA512
aa26bc5e8b93d7b5adcabbfcb64deff2607d6447236789fb97bc18adc3fa6de82bdb3a5b8162d7cb663b33c1f3e87c04377922d7e3db0f900210b394311552e0
SSDEEP
6144:ZO/CDhI966AGkAjOpoaY7qEIe2rNY9Z4szp4sL8kVLA0VBJ:Y/Wq6xGJOpqO8uep4sLBtpV
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0d1aa65256c4dcdbad6d1a489770aa7c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE