DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
471d8302c081ba12e238efc03a362dd3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
471d8302c081ba12e238efc03a362dd3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
471d8302c081ba12e238efc03a362dd3_JaffaCakes118
Size
180KB
MD5
471d8302c081ba12e238efc03a362dd3
SHA1
71caa6b5677cddfd0c0a7f993dd03dcfe58cee10
SHA256
b4309aa4a71667d708505af4ed624b5c2fa40eb6b2304269146dfd406c4fd4ab
SHA512
56a09672b2381458db445fa656cd820494e74fec997e1dcb5d2b9cfe0a1b1ca36f855ef62a86cf7b95c41b5938b533aadcc67c24acdf42ff69b68513a830deea
SSDEEP
3072:qlORsAt0IGV2Ar6kBrFmzrot0bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVUo:buAOVnNpmv4qwvP6bQ7yMP+DE8273c/
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
471d8302c081ba12e238efc03a362dd3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE