DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
038e36a34b2c93efe4abc788d49c7f75_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
038e36a34b2c93efe4abc788d49c7f75_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
038e36a34b2c93efe4abc788d49c7f75_JaffaCakes118
Size
180KB
MD5
038e36a34b2c93efe4abc788d49c7f75
SHA1
f41b58a70325306601fcd8002be928e7f8bf7d70
SHA256
b71ea230846dbafdd5c5a80f865f09a4c3af9b799f0292ce859ad816276a717f
SHA512
6df0478c85bc349fb6e102ceaded9bcf304de31dda122e3406ce4b4ca58b68247732d5a96ffd01c92fc069596c42b5063f50191386b380d3e84cd0219bd6f47f
SSDEEP
3072:9713X1DAKBQGBC+e/pPPbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7sHsat:bhAa1e5wvP6bQ7yMP+DE827sHsavl
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
038e36a34b2c93efe4abc788d49c7f75_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE