DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
17869878f0ef36e1132236fe62d77863_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17869878f0ef36e1132236fe62d77863_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
17869878f0ef36e1132236fe62d77863_JaffaCakes118
Size
231KB
MD5
17869878f0ef36e1132236fe62d77863
SHA1
0bdb8334ab9e9b37884b5a5ccf6a31961db6dfd1
SHA256
3af9de01a86f51adfdb27957911b6870088bed3a4e2d77685914fe9d5bebe7e1
SHA512
6aea0d3a94046658cab76e4165a4b65180b178fbe4022595cfe36a72eaed8675ad775288eea6b91a0c0a8e83b516a06fc45988da5b7d7d2b8a0830e0ca2d57de
SSDEEP
6144:JLxfbrK10ZuWWh6UzkblC1uWqV2ujgxt6dCMULu6cUIl:JVbrfukZWu2ujgxtKCMquD
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
17869878f0ef36e1132236fe62d77863_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE