DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
0d697b801a9fced0bb02e0bedf8c129b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d697b801a9fced0bb02e0bedf8c129b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0d697b801a9fced0bb02e0bedf8c129b_JaffaCakes118
Size
357KB
MD5
0d697b801a9fced0bb02e0bedf8c129b
SHA1
72275d3fa9b758aedaa2caf32d04ee6d4c143ddf
SHA256
7cb36c1c30c0fb8fd34afac4e246cabe5e9ed50332fb059db3a8118237bbad4c
SHA512
fe509edae50e6347d0e7b722a1c4a2ec7ac737a53114eb3464a1ecbd1674e8c1d83aa697c344fd5237bee8b43ca623de70ace5c537a8f22fc1c586e69333a59b
SSDEEP
6144:4jR5ikeEThI966AGkAjOpoaY7pnk+SNzf4MofAfqbhDPGiv1:4jRmIq6xGJOpqNkRyMofAfqNPd1
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0d697b801a9fced0bb02e0bedf8c129b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE