DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
d43dbdd4e4b0b911a21f9c24666c8dde_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d43dbdd4e4b0b911a21f9c24666c8dde_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d43dbdd4e4b0b911a21f9c24666c8dde_JaffaCakes118
Size
333KB
MD5
d43dbdd4e4b0b911a21f9c24666c8dde
SHA1
8f6a59521b2105727370a649d718eb4d465213c3
SHA256
4005ed0207cfae98ad6a58c887fd55819274b73e4b83dca7f2e9b2a3b17a141f
SHA512
c62703658f14b6b7c62e390e2692f1bddb7c167e89d44248ed520b84b0468a549247d984467be58fbd081d8483bed91ee43e55cb591419abf929a863cf5f3ff6
SSDEEP
6144:ucLFEfILgM2u+nmzK6QgSuHL5vj6pNZAbuwjwjl3/DG7o90P851W48MEeMlgaX:uFfIEGpzK6FSkFvpfwjlbG7nP85S3lrX
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
d43dbdd4e4b0b911a21f9c24666c8dde_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE