DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2f123f5c9954bd4e5856a4919489e1e0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f123f5c9954bd4e5856a4919489e1e0_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2f123f5c9954bd4e5856a4919489e1e0_JaffaCakes118
Size
323KB
MD5
2f123f5c9954bd4e5856a4919489e1e0
SHA1
ca9aae89886708b1dacbccca816a001fb7baabc8
SHA256
a5d154a39f61b39a92edd5f952a663856b94286f309b024bc80a7324b1a74dd3
SHA512
49962805bea988cb1e71ea252d1e9da75700231b9e4f1d8c42c899131e0ebd85c9348fd969309f0dfabc88e8aea8a4c8f918d5802c62b3298cf97ec7de18b095
SSDEEP
6144:zmtTwSIDCidhI966AGkAjOpoaY7iAAY27yZniIms+QTfgv:zKFIDNq6xGJOpqkRypiI38
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2f123f5c9954bd4e5856a4919489e1e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE