DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
cefcfd222aff1daae957f09a22c17b32_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cefcfd222aff1daae957f09a22c17b32_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cefcfd222aff1daae957f09a22c17b32_JaffaCakes118
Size
282KB
MD5
cefcfd222aff1daae957f09a22c17b32
SHA1
663b64464db67a8ff96937ba1c59aff32f3b96b1
SHA256
c60fbf9b7642c3f0e121db5b4b3c24ab3c19ea449f977477f0ec4141dd6b6a4c
SHA512
44f96c1adc51a78d0f95d59243d9030a3d57ab69cc20d2be5ca667fd68162c169f72896937afa8d6312ce1aae0424f06ca12a3bd307c24ecc695b66db3d68b75
SSDEEP
3072:xju0aJKmNp1qH08596HM0XU+aDe5UEjmIlmijI7rUGimMi2fWszVcvdWI0V4is3l:VuFJ3qHVn+aC1meyUGimMtzSHqGCrQ
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
cefcfd222aff1daae957f09a22c17b32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE