DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0009004a0a30f8b617abab67e2e84067_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0009004a0a30f8b617abab67e2e84067_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0009004a0a30f8b617abab67e2e84067_JaffaCakes118
Size
181KB
MD5
0009004a0a30f8b617abab67e2e84067
SHA1
98f1a3ede5112dd9fa454384e1f60eaf06beb854
SHA256
abb6772498e5cebc47f2433b1e54e5299e2ba2d414fc616ede5d0c14376db89e
SHA512
bcf95acb351fdb47395672c1afd120d80156c0cba809da56b6a625831e722a92770f69909a9cac66d29da28490f7736e41558c6fe81087facff1a76200a22748
SSDEEP
3072:WcXQVWqj5x+UtRAUkr5WOTwbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7lx:WcAVWqjf+ULkr5zTuwvP6bQ7yMP+DE8Q
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0009004a0a30f8b617abab67e2e84067_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE