DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
dbaa2eef998b55d946faadd124f5d1e4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbaa2eef998b55d946faadd124f5d1e4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dbaa2eef998b55d946faadd124f5d1e4_JaffaCakes118
Size
332KB
MD5
dbaa2eef998b55d946faadd124f5d1e4
SHA1
56823b6a6ef18d43460c0f5433358c542cea691d
SHA256
5c02659bd72a75bd8cb27ec0ff042e2c3ced1a15c51d39e03f45e476488f67d0
SHA512
5ca14c345a2bbcd4f3b348cba8c4dc0804b1a46749f1876120a90b4d7ab5068c148ea7172020433bddba444846b0e9025fd0b8cf77e899f0087fc35d8987733f
SSDEEP
6144:5Tzh33gk+M2zZtCwyC82n+aC1meyUGimMx/BBR12ZzmF+NIivMAXafC9ii9:xJ3gptCSNW1meyUGpS/R12eHiEAKfY
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
dbaa2eef998b55d946faadd124f5d1e4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE