DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
171453afff0c37dc05ef63167eae5505_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
171453afff0c37dc05ef63167eae5505_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
171453afff0c37dc05ef63167eae5505_JaffaCakes118
Size
182KB
MD5
171453afff0c37dc05ef63167eae5505
SHA1
56823c78ad7ae934cd83ad37eccde0f25f2f0232
SHA256
495005c0eeda72f905fa9e439539e8e6ff40b0bc4470f3cc29eb2cf635df7ec2
SHA512
c43cf600bed30acb5fabb0ae0a7af1cd3e74f13bf03682c9acf7406b1a82bf7026a77164be51ca8ae1960c3f52017c9485844411c76b6995de0b39d6b2b4b8b0
SSDEEP
3072:kmrRcysGSHbCKKAEbEHECH/JXrWnUbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxv:x9INBEbEHEYanKwvP6bQ7yMP+DE8272O
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
171453afff0c37dc05ef63167eae5505_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE