DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
36f05279061eeddd277c70554d2b265b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36f05279061eeddd277c70554d2b265b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36f05279061eeddd277c70554d2b265b_JaffaCakes118
Size
185KB
MD5
36f05279061eeddd277c70554d2b265b
SHA1
de275f0a5bf1117844325939d5c4025794d2bb5c
SHA256
4cb2fd553c82a74eed481d34414559df83d151793e4bbc912dec6e8febc5ddf9
SHA512
89368ce857fef3501061c8afbaa549fc08e1e7af6278a557f4350485bdaded60882dfc7e1f3d9536c0a66ca4a016059f978aeb4e027040b577a51c265ff7062c
SSDEEP
3072:EfEydpl0EvcozI/rGe+pIEbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU73ML:EfB0EvJzI/rGeAIawvP6bQ7yMP+DE82w
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
36f05279061eeddd277c70554d2b265b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE