DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
25aa2e115d68cd928acdac21ad7ce1d8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25aa2e115d68cd928acdac21ad7ce1d8_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
25aa2e115d68cd928acdac21ad7ce1d8_JaffaCakes118
Size
186KB
MD5
25aa2e115d68cd928acdac21ad7ce1d8
SHA1
f1b6dd04e50f1b90deb938ab38dd8f4d011f010e
SHA256
72279623967aeb20eb835232bfdd9c78c459156f39b55461b80f6d5f0a812b70
SHA512
b034c7e14ad394bc851755bf6b25dc0ee9f2efec5c8ae4999bb592d9e54b189d91cb09932273eee89b8648994a113cfa6c1748d7f3a2c93ea142b10a88464f11
SSDEEP
3072:ODjeCyKYJ+VOgY92DiafujR3voO1/0bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhO:O7cgS92DJutfoO1iwvP6bQ7yMP+DE828
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
25aa2e115d68cd928acdac21ad7ce1d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE