DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bb4b8e9a2b19ef39483977fcd0f4dd73_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb4b8e9a2b19ef39483977fcd0f4dd73_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb4b8e9a2b19ef39483977fcd0f4dd73_JaffaCakes118
Size
176KB
MD5
bb4b8e9a2b19ef39483977fcd0f4dd73
SHA1
171f6293fd3d097add56f33de7bb9e6fc7a79e4a
SHA256
163c88fdc1f8f91a6fab7a01ff0a96c070f1094a548bd62832d4665a6250e314
SHA512
c91d2968781630bc5fe3122fb030d61c3c2db12f5f50d6319707699acf987ff97dab33d86e3dd9702c1133a6d8a869cadaab3936ce75ce23c9df95391a1dfdb3
SSDEEP
3072:DaMUGFbmHJCHp4H3xTU6bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7vHWEM:DaMvqwvP6bQ7yMP+DE827C
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
bb4b8e9a2b19ef39483977fcd0f4dd73_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE