DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bbf506bd6a520ae6f7868af5fb4bbce9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bbf506bd6a520ae6f7868af5fb4bbce9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bbf506bd6a520ae6f7868af5fb4bbce9_JaffaCakes118
Size
191KB
MD5
bbf506bd6a520ae6f7868af5fb4bbce9
SHA1
2e3a281b73e37fcb6e1ff451f52b3ecda12bc9d4
SHA256
3c71032f75ac5de4b36b64bff49168e39fdb26bb4a8bdad12b94e5d634f127cc
SHA512
65d7239663192f552da61e987188f29857cb10745d0d7ad58f63e3dffdbb3e583cd252397b586ce69388ebb144a92a87fb736e9bac3d198b580dc6f0ea70e145
SSDEEP
3072:WH5kJF518W0Ey96HM0XU+aDe5UEjmIlmijI7rUGimMZlifIEWm+dI:CIv8WMn+aC1meyUGimMn1EWxC
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
bbf506bd6a520ae6f7868af5fb4bbce9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE