DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
d328746642d48ca8ceef9a0ee8aab4b2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d328746642d48ca8ceef9a0ee8aab4b2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d328746642d48ca8ceef9a0ee8aab4b2_JaffaCakes118
Size
177KB
MD5
d328746642d48ca8ceef9a0ee8aab4b2
SHA1
97a8de46c73e5ce271ac9e2d14043331c403dfbb
SHA256
c95551dbf76202d667ad2f78804453b48f8e3d627a297dad0c7b63ecaae2eb26
SHA512
25f061846cca89ffeabf784f6e4905e2b3fec5600530424fa34a2bc24cc4e6ebb549b6db4e07446fc6b2712fa528abbf3e2f74b324c7467cca0a50ebdf515681
SSDEEP
3072:HdaNkcdhwikowTdfOpaxSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7T7J4:9a5b/p9wvP6bQ7yMP+DE827TF4
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
d328746642d48ca8ceef9a0ee8aab4b2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE