DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
41c7cf2bdbd37d4b25b0fa04a4ac30fb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41c7cf2bdbd37d4b25b0fa04a4ac30fb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41c7cf2bdbd37d4b25b0fa04a4ac30fb_JaffaCakes118
Size
180KB
MD5
41c7cf2bdbd37d4b25b0fa04a4ac30fb
SHA1
28204ba445c2fdde36831bd5b863e2e561d2ffe9
SHA256
1d20c8c9710fa4d29963d636c0e6ee88fd25ab6ee25a30653cd6d674e7ba4fa2
SHA512
e86975ee41dbff346bc823595b4bbad782f0b1f951ff85cf585ab2ce87412f915691c473681b7928b3451458d2fb9671e682b606def6df66d0306945ff894c05
SSDEEP
3072:B2c8qLVvfeLw+vlvbQ1qbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU77D3+J:BheDvlvbWUwvP6bQ7yMP+DE8277D3+71
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
41c7cf2bdbd37d4b25b0fa04a4ac30fb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE