DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0d77c78f76e7c689332855325ae521c8_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d77c78f76e7c689332855325ae521c8_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0d77c78f76e7c689332855325ae521c8_JaffaCakes118
Size
232KB
MD5
0d77c78f76e7c689332855325ae521c8
SHA1
7d05c2770a5da89445b977ace9df0f232d5ba748
SHA256
7c479b6f9f7c9b4bac96e954effdec37f41d49966a64960a6262a1e269e32a34
SHA512
427b5e67e803267f11af2f00500020aad3ec2d4d582cf6f9f0ea75e4117d71cad3076c41a73e7a643570a0348b100e915b92dc70f949effaec8ee1e65c20a624
SSDEEP
6144:SXmJ5UDoG3dqu30DG3kZhReyvuffseYnZkK:54XlkbeeusnZk
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0d77c78f76e7c689332855325ae521c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE