DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
68ca3d39e1e08ea78bd7eddd05575f30_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68ca3d39e1e08ea78bd7eddd05575f30_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
68ca3d39e1e08ea78bd7eddd05575f30_JaffaCakes118
Size
268KB
MD5
68ca3d39e1e08ea78bd7eddd05575f30
SHA1
317a3684c83e3695b303b7ade78928b4d78cb13a
SHA256
58670d2845468c5836d33fcf6316d2239b9140b83c8b200fac5466415fabf36d
SHA512
ab423d9c23c66786ff0588f4eb891fc53db431da8ba20235c196402b493940583004c4d90ba5be016ed0ade093f1ea11ed86e62f8981a268db2d1a4d3f54b6f0
SSDEEP
6144:ExsMmBLj+Yy4jK6W9dnW9u14FuetNUUkz5NmoCYHscw7iN/:ExG+YfS+9SiTtNUvXVscoi
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
68ca3d39e1e08ea78bd7eddd05575f30_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE