DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
000158016a1d9a3cf1bc5f96d025a1af_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
000158016a1d9a3cf1bc5f96d025a1af_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
000158016a1d9a3cf1bc5f96d025a1af_JaffaCakes118
Size
182KB
MD5
000158016a1d9a3cf1bc5f96d025a1af
SHA1
f0163a5e8fbd277db8c83dc02bb62e197ee54877
SHA256
7306f3f75873696955412a01111609dc671f905df27cff42646ded685828f94c
SHA512
222e4e3159ad8102f8ec0d57e10a0ff88a3b755726300e4f4ef4edf9fd0f024dcc199e0297936c3e32b995dc1f520db5e9221add77576c63e1d05c0faa0c3bbc
SSDEEP
3072:a0pw7V6BRNssMyT6k0qJhWfEmbbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVQ:TO33fPwvP6bQ7yMP+DE827deFY
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
000158016a1d9a3cf1bc5f96d025a1af_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE