DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3c6b3ab4e8ef1646babb77e73ebb877f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c6b3ab4e8ef1646babb77e73ebb877f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c6b3ab4e8ef1646babb77e73ebb877f_JaffaCakes118
Size
186KB
MD5
3c6b3ab4e8ef1646babb77e73ebb877f
SHA1
3f5c742b06f5b518144d7b2496bac91967dd15f0
SHA256
2e58870819b0a43da324eaaf1eefdb5fe4ed258518415e763c9a67396452d954
SHA512
bc65ea001c53a0af3c0a91af55a635755b1ef24cc6b3d14cbded6de5f93f9952900ac19b0fd699646b46d7b6a377c0c3954af2dc47a621f42888cfec2d0842f9
SSDEEP
3072:Ws3GL4dXzUaNGxDEQkw97bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7emBJ:Ws3gUXzUaNqQRwhwvP6bQ7yMP+DE827z
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3c6b3ab4e8ef1646babb77e73ebb877f_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE