DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
373ce74b3a2c4b44dd3f96fc9653cddd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
373ce74b3a2c4b44dd3f96fc9653cddd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
373ce74b3a2c4b44dd3f96fc9653cddd_JaffaCakes118
Size
362KB
MD5
373ce74b3a2c4b44dd3f96fc9653cddd
SHA1
c7e793217cb050ebdd6281dfebe73fd7d6dee926
SHA256
90f2d68cc9cadc199b1e9eb8f75a889c715b4e59c0f7be516b8645e190d36560
SHA512
e2e8226b34372af33470b12b7d42032d3fe92287cae774f49d702f08fb57d651f5e21f5dac953dab69162afb7dad9727f7699433196f86db272b84fc6a8e08f4
SSDEEP
6144:Fbp8XprhI966AGkAjOpoaY7MPs6LGbMkMa1l0CGPU:Fd0plq6xGJOpql6na1l0CF
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
373ce74b3a2c4b44dd3f96fc9653cddd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE