DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
a4cb96a8b71b4dc58b1bb768a0654d53_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4cb96a8b71b4dc58b1bb768a0654d53_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a4cb96a8b71b4dc58b1bb768a0654d53_JaffaCakes118
Size
175KB
MD5
a4cb96a8b71b4dc58b1bb768a0654d53
SHA1
24d059159fb8e12e5199f4e640e7b556dab575c9
SHA256
74e10030b01ba9893563aa10c57216cf0cbd3724dc2f2c2904d894065c7128d6
SHA512
8275bc77929d0e29ed21c54ac3c8e1b8bd1a29de7422f5f75a24fee8ada79efd284fc64fbf99b2177a66fdbfce5dacd2db747be7dcd645fdfc87644843b4769c
SSDEEP
3072:Wbbs8/nSo242W4ob84jyxIwJo6LbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyn:Wbg8/FmWL841SwvP6bQ7yMP+DE827t/a
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a4cb96a8b71b4dc58b1bb768a0654d53_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE