DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0dbc359d7ff6c55c52f2488cf253cec5_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0dbc359d7ff6c55c52f2488cf253cec5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0dbc359d7ff6c55c52f2488cf253cec5_JaffaCakes118
Size
187KB
MD5
0dbc359d7ff6c55c52f2488cf253cec5
SHA1
8189cee6ea88051205547496bd075046a27c7b14
SHA256
6daaebc6ba62c1a2fe3c9f5ef08d077df32daeaeab4021758189b894a2f7a330
SHA512
c5938578b555e75eeb98c3583c2b20658cc04d8d5727387bae8daf10bc1e3b76695ab06e44bf811a6feb3beac5cecbf004ee5f090a5ac5de73a7e387adb20a94
SSDEEP
3072:ZU3ew5NM0omDHrU/Krs7fewE+bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVUK:qSp6rU/KoFEAwvP6bQ7yMP+DE827ExzJ
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0dbc359d7ff6c55c52f2488cf253cec5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE