DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
c1f16ac4c6b4a273451154d5be9b052c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c1f16ac4c6b4a273451154d5be9b052c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c1f16ac4c6b4a273451154d5be9b052c_JaffaCakes118
Size
170KB
MD5
c1f16ac4c6b4a273451154d5be9b052c
SHA1
d771f7a181d8d42c670ab5cbc7b257653292e1f2
SHA256
b6023d9e98220a9001072004c980a9b93b533ec3ce4219858fc928fead7e1df1
SHA512
37457c36085ea52747b5cd956dce85363611435227d2c2d475e5db8459460e62c3cad56cb573d8dc934bc90bb8b36ce414872853dd369b30e0ea48866de67de1
SSDEEP
3072:lyaH6nBhYZHoQPOWlh+O5iuDgNI9c4CwShRRFpYZTF:lya4YNP2WlhlDITpiB
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
c1f16ac4c6b4a273451154d5be9b052c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE