DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
a84e94f04d85b6537061d5b70aa5b598_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a84e94f04d85b6537061d5b70aa5b598_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a84e94f04d85b6537061d5b70aa5b598_JaffaCakes118
Size
169KB
MD5
a84e94f04d85b6537061d5b70aa5b598
SHA1
c1c789e4cf83f220c879d7ad82b59aeb70bbafdf
SHA256
f961f410e7a1a367f8d4d9931d4791cc5d3a752811ab28a580e750b13fe7f1a0
SHA512
06393bb70018fe477911b6717d8a864b2bc82b2e15ff703713617fddf5b114d6b52efb7fb1937ca4b6aff98b30203f904d251501721183fe89f01a801e270b85
SSDEEP
3072:Hc12r+i/fbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7+vTgetEhxFyVU7Y9:HI2v7wvP6bQ7yMP+DE827QE827xyLc8
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a84e94f04d85b6537061d5b70aa5b598_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE