DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0da1a9eafdb97aa8a0f27835724a8f30_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0da1a9eafdb97aa8a0f27835724a8f30_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0da1a9eafdb97aa8a0f27835724a8f30_JaffaCakes118
Size
174KB
MD5
0da1a9eafdb97aa8a0f27835724a8f30
SHA1
f4415d976094b8ffa224402b75cdaf5dabf8e7f8
SHA256
73710b43701a9a76664ca8e765413ef1f792d8310444c279faaed20bc7089884
SHA512
db2aed5f418db5b2a4510e74022f710de745322c34f1af8cb9fba624cc5e37e9f2246b01ac72f317b893d91a2a131354b6c454b5aebb08a627b138e7a97663a3
SSDEEP
3072:sYMewQSLQvcJKGpT4fLVtte5bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7S:sQBcHK1ehwvP6bQ7yMP+DE827DXou4L
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0da1a9eafdb97aa8a0f27835724a8f30_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE