DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0d9fba56f25da4efd9ab3bb69871f890_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d9fba56f25da4efd9ab3bb69871f890_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0d9fba56f25da4efd9ab3bb69871f890_JaffaCakes118
Size
406KB
MD5
0d9fba56f25da4efd9ab3bb69871f890
SHA1
b0a9ce4ebb824df313d153f123f2145420ae75b2
SHA256
34b890df0411dc5134af70bba44ab8ed2ec825cad474d27298521b6509349c9f
SHA512
3f884e54527d48f6fe6cafb0079505d0565a1b115f77e0975e3328b00319761ad2ce11d4f8a692b24a0c96e17f956c5534f376bd5e9e3663d5c777645cc6f1e6
SSDEEP
12288:E/84097YEfWtx40duPHF4FbCYYPQOyIQFkXW:S8V0QvF4WPlyI+
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0d9fba56f25da4efd9ab3bb69871f890_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE