DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
347f5212a361a76f18ac7ba3362c6ef7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
347f5212a361a76f18ac7ba3362c6ef7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
347f5212a361a76f18ac7ba3362c6ef7_JaffaCakes118
Size
368KB
MD5
347f5212a361a76f18ac7ba3362c6ef7
SHA1
e66f32d4e5bf3a178f6ea55b6cd1d2d18630ca3a
SHA256
82cde90dbdb39710beaaa9d95f14ce5bdddb5a0e60b02279782d7f237dcc5fad
SHA512
692efa1d588a5c67edb7b515b5c652249ff8586a8c36c2ccda39b14fcde49f613661fb090e89d68efa4e4cfab8a4601e3ed752d261f888b61fc7308a4b340474
SSDEEP
6144:UWMfm8nnDzH8ejz/e+Yq58lHDf4s0JZVNjU4curu4S7ztHE1BhNoDvd:jMfZnDzc8G+Yq5IjAljEuy17ztsL
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
347f5212a361a76f18ac7ba3362c6ef7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE