DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
445ecf20df8afb7c0ac61e90c27dd044_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
445ecf20df8afb7c0ac61e90c27dd044_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
445ecf20df8afb7c0ac61e90c27dd044_JaffaCakes118
Size
180KB
MD5
445ecf20df8afb7c0ac61e90c27dd044
SHA1
b377ba6de1b402a24d4d14ab7c171cd7143a26f8
SHA256
f21eee25c1806786cd1722a70cf122eaebfd627cde04aa818bb713a2ffc108c3
SHA512
819469936089f9be586faebe3689d84d35509987c5667196b9e2c3d46d42a872e71444fe6761d61ffc044fb8bf88260a8f4363e5df536f7d12aeed80d4e6f50d
SSDEEP
3072:fiva4yfIYQLvky4wR6pBCZkgmi+ALBvcbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQY:fiCpfIYikyQpGkILEwvP6bQ7yMP+DE8W
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
445ecf20df8afb7c0ac61e90c27dd044_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE