DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
380b51328b79bccf955c34d4bfc799ab_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
380b51328b79bccf955c34d4bfc799ab_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
380b51328b79bccf955c34d4bfc799ab_JaffaCakes118
Size
184KB
MD5
380b51328b79bccf955c34d4bfc799ab
SHA1
116679be31029d5497fa87b9b1c5fc8de9d05517
SHA256
1c4329266735354d8134519de781626f2eb06a3cf4ea8d7df6684597c72b543c
SHA512
98c5cb2f1f97da87f82ad2925c6d103a5648ddc02dc11ded281254131cfb903158033a225265c0e8e25f400429cc3ac4462d648aaab05b3510ce349b2d138de8
SSDEEP
3072:EAQmByuSYwlPyZi0bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7V7KcB:FQmByBYwSnwvP6bQ7yMP+DE827V7LB
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
380b51328b79bccf955c34d4bfc799ab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE