DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
4706f23dc7bdcf0a1932ad37895fb0ea_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4706f23dc7bdcf0a1932ad37895fb0ea_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4706f23dc7bdcf0a1932ad37895fb0ea_JaffaCakes118
Size
356KB
MD5
4706f23dc7bdcf0a1932ad37895fb0ea
SHA1
6ebeea72c93043b6737e9c7b7067ed80f909e560
SHA256
93f0890508720eeed60afd0b91e582052d7913afd45aff8e8101a3bf47f84d55
SHA512
956d51408fe7699ac5176b2e09f1b2e401605989bc73d4e080a5e9179019d75bded2944d3f6b2df88445aee0fb1342dd381b9db7c7091c66ae3bb9e4c16ffced
SSDEEP
6144:MqLg6yNvK1NHbhI966AGkAjOpoaY7Hwviy5aRwDnKahkLqTk:DyNvKnH1q6xGJOpqbwK1RkeGTk
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
4706f23dc7bdcf0a1932ad37895fb0ea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE