DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
5e6cc3deb828f647f50af579a4897dcc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e6cc3deb828f647f50af579a4897dcc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e6cc3deb828f647f50af579a4897dcc_JaffaCakes118
Size
175KB
MD5
5e6cc3deb828f647f50af579a4897dcc
SHA1
b45ad69b7515e16d6a9e3292108caf0d79ee16a4
SHA256
d8bd93fb7df55bb89fbdd26e1b48447c303c539336ce49749ab09df7d187127e
SHA512
33611d47b7472a4789ab3fff7113a26f98f607300e91db176a68029f457a324dad85272c239e32123b2da9368f7657a24a18657b4b607ab0b915dc843c4f5d64
SSDEEP
3072:kSATwzH2JdQSz5RbeHxTgbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7gLeN:NhzHpSzGcwvP6bQ7yMP+DE827gqN
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
5e6cc3deb828f647f50af579a4897dcc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE