DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
716dd20e7f80ab0f0054054199fed45a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
716dd20e7f80ab0f0054054199fed45a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
716dd20e7f80ab0f0054054199fed45a_JaffaCakes118
Size
218KB
MD5
716dd20e7f80ab0f0054054199fed45a
SHA1
5a212cd6fc205ddf03cbf2bc99c3d35d421fa595
SHA256
12db19e6af03556d812820a9503643d381976d442d2194fc13a7767bfd8fe900
SHA512
44c694881a253ceae5216be60248f950e4a941d34d69b9210a6d5676014ece938f0ebcaf8c5601f63f874b5ddbfe471ee89283ce6c2a89ca48d4f090987f81e8
SSDEEP
3072:ryp1jKyZDNrGA6WU0CNiyR6mV80Oue03cdRJB2vY5n6ezdNtC7zxz74epEumcl0g:ryp71fmNRauecmRJBAYN6eH0357EG
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
716dd20e7f80ab0f0054054199fed45a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE