DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
62f346b9b38861489fa6f7777803297f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
62f346b9b38861489fa6f7777803297f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62f346b9b38861489fa6f7777803297f_JaffaCakes118
Size
54KB
MD5
62f346b9b38861489fa6f7777803297f
SHA1
c120d13c3f37932222da6debb3ab8173a67231f3
SHA256
8f647c104cae827f6bca9674c9c596a51bb12106787a54853c2c7e089fc813eb
SHA512
1437a0e858b055b8787f70280a9e7a4fcda82f72ae531ff653dd60c03a57e953f3c6080436dd106c31a5210692d1e644eb1f250305117953004a13c2d815167c
SSDEEP
1536:tEgOBHhqBP/n4fyESmyHziRjvSG1DHgcW:GTNQRnw1LyHzi5vSGDHk
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
62f346b9b38861489fa6f7777803297f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE