DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
8253c8c54a962961ceade89a8abd1014_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8253c8c54a962961ceade89a8abd1014_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
8253c8c54a962961ceade89a8abd1014_JaffaCakes118
Size
358KB
MD5
8253c8c54a962961ceade89a8abd1014
SHA1
49db00d5e8566c522b1e4adff886d88f20c671dc
SHA256
fb0d00357d35d392d261e001edd1c39c4041d17dede58dd52797049ca3ac477b
SHA512
15de9fd20fca1ecad70fb4fdeb81adc3a5c26d3db0945f8833183aada44249c6375e1b2a3268a60ae0e7615e1f5008bf29742aa74822c859231156c74d55f4d6
SSDEEP
6144:XZZHpZ3/PrmvwhI966AGkAjOpoaY7ank+SNzf4MofAfqbhDPGibH:XfvPrmgq6xGJOpqGkRyMofAfqNPFH
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
8253c8c54a962961ceade89a8abd1014_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE