DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
19d56156cc2da5f661f8c3016912179b_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
19d56156cc2da5f661f8c3016912179b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
19d56156cc2da5f661f8c3016912179b_JaffaCakes118
Size
186KB
MD5
19d56156cc2da5f661f8c3016912179b
SHA1
9bcbb8a8b110bbc9e3afed466270df9a7cd8e995
SHA256
37a613352bf0f7ce0fc79206db8ddef5a30a2107758dd6a8ebdf1672697ec4c6
SHA512
e332168ecf22ab368b87897fc6cbebada7abe5d1c9edf4180a9fd41f40b1689905d769f31390b56d8e6e6f5a5ba1699c935494c99eef097174c9bec660076d02
SSDEEP
3072:b2bjhjWXAUFuXt3n+GDyausJqmvGocIVLbbrMbvT0q8O1cZPzQ7IXMBc+AMP+Qfx:iGduXtX92GJ5pFwvP6bQ7yMP+DE827Qy
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
19d56156cc2da5f661f8c3016912179b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE