DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bb74412c54b47048c196402690cc4160_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb74412c54b47048c196402690cc4160_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb74412c54b47048c196402690cc4160_JaffaCakes118
Size
175KB
MD5
bb74412c54b47048c196402690cc4160
SHA1
c97c743f850e71cdcdb12bc9e24e21fa77f20e76
SHA256
047c3211e18047bae5de01482af08791ef21b01460a69372298be382510e6a2e
SHA512
4e0e05a9e30b781e9797f482229fe86ff299aa69ae0f1bf588d896e4ed5b9bd69bd94fb8b149f0b59c873d58b0600bebe5fec60a77ea8cfd1a8949710826b2ce
SSDEEP
3072:UaEwI22TjbVqbcf57wg6OPSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7Lj:zYjbEXtwvP6bQ7yMP+DE827g8dY9w
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
bb74412c54b47048c196402690cc4160_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE