DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
ac89ac109dcf4dc3805b86123b8e261d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac89ac109dcf4dc3805b86123b8e261d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ac89ac109dcf4dc3805b86123b8e261d_JaffaCakes118
Size
361KB
MD5
ac89ac109dcf4dc3805b86123b8e261d
SHA1
8fcd321926bd6b3aefcbaf531eee33fadd7a7138
SHA256
6b5ee549d1881b2c4cf5ef647679a74f5d21c36e4f3af4b74acf834f85f26816
SHA512
4473ad8288010c19a512ba04142f180e6d253ad7f64f6424213ca946942ffa337b54c61e35e4bfc49fc41fc22e3d5efd2cab5ff35b20e8b3ed02e4588cfaed0d
SSDEEP
6144:uZIfRPU/yQcChI966AGkAjOpoaY7zAAY27yZniIms+QTfMw:uZeJU/yQcOq6xGJOpqXRypiI3r
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ac89ac109dcf4dc3805b86123b8e261d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE