DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
21b7dfd618ceedda5f3f261e00a15874_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21b7dfd618ceedda5f3f261e00a15874_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
21b7dfd618ceedda5f3f261e00a15874_JaffaCakes118
Size
184KB
MD5
21b7dfd618ceedda5f3f261e00a15874
SHA1
85f59d993eeb7302f6d7f6ad05a887cd5a06588a
SHA256
727bf8ed4a99bf80775d70308684bf539053894571f8ff274fb94227e28115b8
SHA512
e3ed337f1479f5d0b00a510c4061f60c530c55600d9bd0e624e19135fe1c618de79bd7c38a973e60f2403b8cb0e63b79aa9b9e9bd9bf6ec014399c55a8137077
SSDEEP
3072:ky9N/aaNM9aHDMzMhlrapiEK0bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU+:kmjK9CDMzMAiEvwvP6bQ7yMP+DE827cf
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
21b7dfd618ceedda5f3f261e00a15874_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE