DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
5ea7973c8561b39300fa665638197aeb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ea7973c8561b39300fa665638197aeb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ea7973c8561b39300fa665638197aeb_JaffaCakes118
Size
181KB
MD5
5ea7973c8561b39300fa665638197aeb
SHA1
31bac5da342dff7a400cefe3886281fbbe4c7435
SHA256
4c2418baecea9f240a1a127553773d321901a9c976cf5555cdeacac673b8fd47
SHA512
c7af3adbc42288c5180470f5d75a7743b6e5eb1e1efd4d4700464a4a488588178c18f0abb78f527508a5b96530eca1f96b7826216540117a9fcc357391f42933
SSDEEP
3072:xfP2R+V60D0FAWkGaUehXu2ScgrWnsFSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQg:hPtVDDtgOnsF8wvP6bQ7yMP+DE8275GW
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
5ea7973c8561b39300fa665638197aeb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE