DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0f1e2eb9d56b315178e5a3050c771ae1_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f1e2eb9d56b315178e5a3050c771ae1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f1e2eb9d56b315178e5a3050c771ae1_JaffaCakes118
Size
181KB
MD5
0f1e2eb9d56b315178e5a3050c771ae1
SHA1
c8f8da59bfeb9d7d8ad853a8492a617468da0531
SHA256
85acc89f90876162de88274064b9231f87f4cd7091bdbe9aa64e1691c8710eca
SHA512
3930a5425d74a6c8efdaa6c22b23cad4957863efd21bdaa7552a4d04ca148bd48d660d0556a60e953b6734012660fae380f56be8251e8395868ba8d51a6275ac
SSDEEP
3072:kObj1WvGhaBACJhjXkCQD3rWnTYbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyz:F8hBAAbkC+6nKwvP6bQ7yMP+DE8277wJ
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0f1e2eb9d56b315178e5a3050c771ae1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE