DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ced44819f4c99a21c4a64a80aee4ad4a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ced44819f4c99a21c4a64a80aee4ad4a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ced44819f4c99a21c4a64a80aee4ad4a_JaffaCakes118
Size
234KB
MD5
ced44819f4c99a21c4a64a80aee4ad4a
SHA1
5eb23e47502756923b6d9b35d9108158d2380f46
SHA256
fa120fcc62fc7fee28a45ed5cbe6ba03d35eab185e90c4382c573a9412c91905
SHA512
d1a5265fbf8576bc8ca89589f3c1375991e550fe8b67f4b586b4c90b9ae982743a1f7dd47a6847d8a5b0edef0c7ced327bc74d56903f9add4f5f7c449c2be170
SSDEEP
6144:uHJtjrP/HleJ55k1C2H8KQlmey/Dw190zTOT3x/sv:updb/H0J55GC+ze8Dwr0zTu
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ced44819f4c99a21c4a64a80aee4ad4a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE