DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
039e1dec983eeb7e24d8227876f9f8cb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
039e1dec983eeb7e24d8227876f9f8cb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
039e1dec983eeb7e24d8227876f9f8cb_JaffaCakes118
Size
184KB
MD5
039e1dec983eeb7e24d8227876f9f8cb
SHA1
d6cf40155b957929224ca18398f444dc92032d5c
SHA256
ac6c8fd67f594c2ae9291420e583e083c04f56ae18afb8975ce066b0a91b537e
SHA512
fdfe6b8f089775bceda83e3fd17016a037a7cae16d0009f45253c66098e8d13d083cb1ba2413353818269105109baffd61fadeb84d45007f209a9ae6f1213194
SSDEEP
3072:CzD7/7XKSTgpBp+WzQpK96Lotd7bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyc:0D7DXKSMpBp+WzyI6Lot9wvP6bQ7yMPR
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
039e1dec983eeb7e24d8227876f9f8cb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE