DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
3be7321b4ad80f075213a3fa36ff8177_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3be7321b4ad80f075213a3fa36ff8177_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3be7321b4ad80f075213a3fa36ff8177_JaffaCakes118
Size
305KB
MD5
3be7321b4ad80f075213a3fa36ff8177
SHA1
227c3eb3fbb77937aa95f0f650a4393adbd73f86
SHA256
c8d6332671e36870ff66ff5bb28e162ca3967c9f00bcc9c31fa7f67ae8b758df
SHA512
c1bbe74152be68a347d4ed319e8bacc4432a5f2b708d0d75a6d6053a5010df8eae4d68f165dc41dd26d60a3663b0d0351a4f15d586a65b7156f9025add78ff39
SSDEEP
6144:6JnIRzJ/9Jow8g9qU4BLCh6D1lR6P9aPoCKH3HivrN8H:iMJ7ncvChq61ugXHwJ
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3be7321b4ad80f075213a3fa36ff8177_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE