DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
43310afcf2636de8437bc1957bf9d5e9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
43310afcf2636de8437bc1957bf9d5e9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43310afcf2636de8437bc1957bf9d5e9_JaffaCakes118
Size
357KB
MD5
43310afcf2636de8437bc1957bf9d5e9
SHA1
07cb294e33b69c702711955a5cd97af68c4c92a8
SHA256
c7f60e4a685d6ce3e8e1ffc864ccdf37f875eb84c99c1f4e33b98b74d47ad74c
SHA512
43fa89a9486f1b8bad315d822571638d7b92e00281ee90d7286a997cb6fe46a77980edb1c13709d0dac3b59bdee9a19dee90105a56bc6c97c37072413902cd9d
SSDEEP
6144:DaS0T4v7P1ghI966AGkAjOpoaY7YcMZdQQUn5FfieDEAKMjhRIC:GS0Mvuq6xGJOpqUcMXTUn5Z/ZRB
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
43310afcf2636de8437bc1957bf9d5e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE