DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
29f05a361a2989c34ff413d32f8c4eb6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29f05a361a2989c34ff413d32f8c4eb6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29f05a361a2989c34ff413d32f8c4eb6_JaffaCakes118
Size
577KB
MD5
29f05a361a2989c34ff413d32f8c4eb6
SHA1
8e9f1c31b06067a393955127ec87b3a86fd358e6
SHA256
ab9ed7998216c09573f123925071e4f30684c2d349ea52e13c3a63e56ec54dc4
SHA512
54d0ff422e2f5b44f702714bdfed4b7ef27bf826993ee399122329a9b24d0133f58add3f0b0e73909f3c4ac531db52276840d80dd7d5c78ae92e22d320182509
SSDEEP
6144:+gxnRLfOiVeAToIUs1IO78OAXq5cO9K6Z5yDXrRCXU7CvMBQwpp5z/fHpE:lLBVeQLIOYna+2lZ257CEd7f
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
29f05a361a2989c34ff413d32f8c4eb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE