DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FeedPacketHandler
Behavioral task
behavioral1
Sample
35997e81821e85e722f85af02e13a82d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35997e81821e85e722f85af02e13a82d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
35997e81821e85e722f85af02e13a82d_JaffaCakes118
Size
208KB
MD5
35997e81821e85e722f85af02e13a82d
SHA1
9c1844cf1abee51b6c1104488df9b0e1cf8c28d0
SHA256
1ae50f0a08658c1fc6ccce58e25078732bf69426d5ed45d563cfd927bd86c127
SHA512
7a2cb309efb81a1d95e5e675bdbfc0a43cd53829133b003ec2cbb7a624c6fe39ecabdd03114ddd60a07906df00039f8053ef3e39452b869df8208b10adff6c0f
SSDEEP
3072:DyUrlJKhkTvUEoqIpQpHmyCLwphhJisHhACHw8YBeRi5gROxSD/0xbTtWLW5KTd:LJ0kTvURq1pHmR4hnBsY5zMbox
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
35997e81821e85e722f85af02e13a82d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FeedPacketHandler
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE