DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3424c8cf0e7f1cdd375a34a278c973d3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3424c8cf0e7f1cdd375a34a278c973d3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3424c8cf0e7f1cdd375a34a278c973d3_JaffaCakes118
Size
137KB
MD5
3424c8cf0e7f1cdd375a34a278c973d3
SHA1
c2c24e4a52027fc1a8a83519ac5340551051df41
SHA256
16b52c0ad2c21efd91a3f0feadfc811ed00f6ea14b8cf61b1ec110c7d015e3d8
SHA512
ddb36fd4e5d4a0cb4b4dc4664cc05313cc9585ba73c8eba2ed8fe61fac49150fd283c0f16c1442ee7ecd70154bbb27862aea4a6d4c338fe841defa5115413136
SSDEEP
3072:R2eI2+2q+4/bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7Z1bM:wQqwvP6bQ7yMP+DE827k
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3424c8cf0e7f1cdd375a34a278c973d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE