DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
e1c5301a294d474b48e3db11d9f4bcfa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1c5301a294d474b48e3db11d9f4bcfa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e1c5301a294d474b48e3db11d9f4bcfa_JaffaCakes118
Size
178KB
MD5
e1c5301a294d474b48e3db11d9f4bcfa
SHA1
893192b505b3ad3ee9d7a68efdfd00d9eda81f91
SHA256
9972b0c4cf49e5e7aee85eb305436a8ebdbaeb4ea7b406212e636cc6ff0d6b8d
SHA512
5500dbf8f19402dce91dbb64a3304dd285f85e0a91b76da73f8ab2cbfdd8368c554424ed9b61250198ac6150476ff1fa9fb0a7593f1d9ea3f00e37be1d46dde6
SSDEEP
3072:muucjDm+7JPL3IR3y2RyIsmSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7k:muu8DmULIs4yxwvP6bQ7yMP+DE827d8H
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
e1c5301a294d474b48e3db11d9f4bcfa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE