DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
a866cc17b8d50942810ab53896811fd2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a866cc17b8d50942810ab53896811fd2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a866cc17b8d50942810ab53896811fd2_JaffaCakes118
Size
226KB
MD5
a866cc17b8d50942810ab53896811fd2
SHA1
b3e240489a6fb229aecd4cec50b255f3f4ccd256
SHA256
1ee75a95cc398f35136c4d6fc4e27c85d65f022dacb9d3213a123990b43bb59a
SHA512
6e12762cbce6bee2f5cd77ae8954d3de54770266cb7ee21ad9c419eefdce5e7a9fd3d5b9a113f246b57c4d0d07f1705c20af8ff0e0ab47acf02c658644b1724a
SSDEEP
6144:UOayMVBNfIukcZv8GxwT5kiGdZckqqHYg/BNmIn7Zejl7:UOay6BFpvf6adZc5qHYg/evl
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a866cc17b8d50942810ab53896811fd2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE