DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
34cac796652aee26610ad5f840107b00_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34cac796652aee26610ad5f840107b00_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
34cac796652aee26610ad5f840107b00_JaffaCakes118
Size
187KB
MD5
34cac796652aee26610ad5f840107b00
SHA1
4d2bb54177bb184f7c8d6d78ae98b11e020f1078
SHA256
79266fb4585aab069867cae53dd373e16c5f9fad01f0bb1c133aee442cdab461
SHA512
b333d5020c3c3c4d3a355e68837124890a6a7a6adc90e96c690f341076e319538ed3da826a26f42f5c6835f9205009904ec00462e8a36e667bddf5fcfc723e4a
SSDEEP
3072:4Jsjn1xy/Iw0nDbjcsG60bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7vE7a:55xU4jcsIwvP6bQ7yMP+DE827cAH
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
34cac796652aee26610ad5f840107b00_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE