DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
e706499c4f284abd90245fb6ee7daf10_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e706499c4f284abd90245fb6ee7daf10_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e706499c4f284abd90245fb6ee7daf10_JaffaCakes118
Size
62KB
MD5
e706499c4f284abd90245fb6ee7daf10
SHA1
f1d0ff86c649ad57228a6f78bb9edf0abeaf978a
SHA256
83f5a20ca03814eeaa6b3ca5d3fa76bcbbe62154e5860c6ea15a1502c447551d
SHA512
03c5387ba96ef56fc1a1755eb352bc0a02befcde1f581b69612a09c060c5f90e90c8df13bb3d3daf0f386308220eecfb8477712545e563d37a93becbf04ee529
SSDEEP
768:a3p1CaN8PSZjw6A/pnGEvCqmyQZhDeqcd+awPF8xNdeVW:y1CaNvZpipnG7yb0VPm/
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
e706499c4f284abd90245fb6ee7daf10_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE