DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
8bb18338ee5fcdf6a2d8fb78ded618e0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8bb18338ee5fcdf6a2d8fb78ded618e0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8bb18338ee5fcdf6a2d8fb78ded618e0_JaffaCakes118
Size
363KB
MD5
8bb18338ee5fcdf6a2d8fb78ded618e0
SHA1
6c4468ebb76fbd9fd128f27a3d9e60c119295bb5
SHA256
0f1480bba5a2533358b6f7e61d66eda9dfe949c36d82129ebbcd291408dae3a6
SHA512
e09d0feb0043b1e8842743a86c3bc7e7b26bc0e7bc1816d3039367f5f72a84f613379aedd3681cbae0e569638c7c9fc058f748268d9ff94adf31475ef2ec8ddc
SSDEEP
6144:91E3SS7b7eqB/8hI966AGkAjOpoaY7sRCP+AITJogQ0uGxDPsx:UCM7Bd0q6xGJOpqIc+AEogjI
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
8bb18338ee5fcdf6a2d8fb78ded618e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE