DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b08b731e834b2836cca65189c1edf812_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b08b731e834b2836cca65189c1edf812_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b08b731e834b2836cca65189c1edf812_JaffaCakes118
Size
185KB
MD5
b08b731e834b2836cca65189c1edf812
SHA1
75f3ce5722823f2658b07b4e36ce9945d5c58961
SHA256
47917211463e5d0e67bd0ac0e8c982e487e145d731ee9d64c5dc98ea9b560584
SHA512
2f0eae5c8f3ec6b874155aa09109e62f62133ff068be4d05eef2308b61ffa8d66019bb1953d7726e42f5367fc212ed1bb3e2ff2f5156249150a7f507dfef1114
SSDEEP
3072:4Jsjn1xy/Iw0nDbjcsG60bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7vE72:55xU4jcsIwvP6bQ7yMP+DE827cAUK
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b08b731e834b2836cca65189c1edf812_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE