DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
bfddf815dc62d671c2eb141799ef1cd4_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bfddf815dc62d671c2eb141799ef1cd4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bfddf815dc62d671c2eb141799ef1cd4_JaffaCakes118
Size
365KB
MD5
bfddf815dc62d671c2eb141799ef1cd4
SHA1
26e65e0b4a9eaf5c9ae29b0294eeb7b39f2147fa
SHA256
2dc99ffc86b59ab3e876f1dcc6638f6455b50ab0f0f61524bdb3bd2a751c2a9d
SHA512
8a8f58c47b61d339fe5a434813a6faa0a8e13e74b39f6f2f6d8cf13e725f7933708556e51fb80bcad1afd888d45babf2dafe0a13c80d97a405481ab4d3d9615b
SSDEEP
6144:MNy1bN+FFhI966AGkAjOpoaY72mJRZw2anoQz5tSGnyO/BuI1SfsOlW/ZS:MNylN4zq6xGJOpqKmDa15tBy8uxfsb/o
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
bfddf815dc62d671c2eb141799ef1cd4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE