DllCanUnloadNow
DllGetClassObject
Behavioral task
behavioral1
Sample
705cedba751b460e6fe39b141005f55d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
705cedba751b460e6fe39b141005f55d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
705cedba751b460e6fe39b141005f55d_JaffaCakes118
Size
106KB
MD5
705cedba751b460e6fe39b141005f55d
SHA1
f2174937b62001be07b34d3366d62fb8e9363ae7
SHA256
2fb6bdd3ab7ee958fbd5bef4f233bc4e540517e49d3c04ff176f143a40adb759
SHA512
8c5968ccd1b97ea3a0db5863dd0985fd0e43d5e071f7a8ae5a0f64edbb6223888736faba8203c519294af2de998c4c686bd3d58aac9259aa4d50ebd733acdc46
SSDEEP
3072:pnG4vZIszTH+5b6x0NfM/RzWOmIOPsI1ttGOpOY5:1rZrzTejezW0KVGOp
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
705cedba751b460e6fe39b141005f55d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE