DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
a7e229b572ae17b3a7b50cb9e590c376_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a7e229b572ae17b3a7b50cb9e590c376_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a7e229b572ae17b3a7b50cb9e590c376_JaffaCakes118
Size
541KB
MD5
a7e229b572ae17b3a7b50cb9e590c376
SHA1
ff0110777b452a0bc430d9900c0371a08c22c6cf
SHA256
7cd43c1e211dabf83f80c72761d3b2ec901a37a0cb572e7c7d508cf0afc046fc
SHA512
90f1630b7c7acb038ecf5936d73bbea37e662a577a5444bf5a74884a24f26dc7b0d8eac984c6aab84c3a92516d9eec7a9e9360e886ad2771ce013af0e8897c92
SSDEEP
12288:0EnBF8DjqVI9HVTyiEF3Z4mxx6DqVTVOCBsE:Vj8XqC7TyZQmXBVTzBh
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a7e229b572ae17b3a7b50cb9e590c376_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE