DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
a59424215d009334666fe072da92d62a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a59424215d009334666fe072da92d62a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a59424215d009334666fe072da92d62a_JaffaCakes118
Size
357KB
MD5
a59424215d009334666fe072da92d62a
SHA1
0e040b1c77bc4784014d394786d3e989052295e0
SHA256
a67f7124f8af8b80136b4ed41418a3c4ed4be432d5eb0e96ed50d35b17fc725d
SHA512
f8d606fc92c338f560b36780b4440f086d194529638287ada3211db471b0fba9dcbbf0e5700ac82db4e3ea1ff1476848ca59c0db83cb0cb66b28f2cf2106aa07
SSDEEP
6144:6WOpjfr8qsn2Rv+hI966AGkAjOpoaY7Jp/lNsjGHItjKbL6H:6Wsj8qW2RSq6xGJOpqVp/lyj1tm36H
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a59424215d009334666fe072da92d62a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE