AdmDllDeInit
AdmDllInit
AdmDllInitAccessCheck
AdmDllStart
FreeClientSec
FreeServerSec
GetClientNextDataBuf
GetMaxBufferSize
GetRADSecurity
GetServerNextDataBuf
InitClientSec
InitServerSec
MakeSignatureServer
Start
TestUserRight
VerifySignatureClient
Behavioral task
behavioral1
Sample
49aaf1aaa0cd2fdb9f1c707162e17374_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49aaf1aaa0cd2fdb9f1c707162e17374_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49aaf1aaa0cd2fdb9f1c707162e17374_JaffaCakes118
Size
313KB
MD5
49aaf1aaa0cd2fdb9f1c707162e17374
SHA1
cd22aef5970818a43164e6d607ba7f18c56e7f67
SHA256
b5116b64f64ac7376c65fcda561d907c4abf01e65acbb7ce06667ae56574b672
SHA512
84c6ee0a2309ea1a6743576def1651188dc0ed385cc6b61a92f7e79414fa4a2b4dfa461fe9a3f5f810ae4af92afcb3e615ef01153ac2f43fff77e7df79e7f3aa
SSDEEP
6144:B5bK1cNwPLvoqg0R2VhPefm0ToZSbKyCGgSpnN65f:B5bK1c2obY70IKan85f
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
49aaf1aaa0cd2fdb9f1c707162e17374_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AdmDllDeInit
AdmDllInit
AdmDllInitAccessCheck
AdmDllStart
FreeClientSec
FreeServerSec
GetClientNextDataBuf
GetMaxBufferSize
GetRADSecurity
GetServerNextDataBuf
InitClientSec
InitServerSec
MakeSignatureServer
Start
TestUserRight
VerifySignatureClient
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE