DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
011eb653bd63e622e762934ad5192c7c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
011eb653bd63e622e762934ad5192c7c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
011eb653bd63e622e762934ad5192c7c_JaffaCakes118
Size
182KB
MD5
011eb653bd63e622e762934ad5192c7c
SHA1
ae24274b994f594a460c058aa17a2582db01e417
SHA256
b763ee165ebf5ba91b055e1a43f733b1b8fcd738f687fa87223a5661d2ef6c20
SHA512
ffd2763dd6154fbacf29801c20c6176756e016cfed0abf4076baae47c7cf863756f1c33308ecc00e77303aa0f2d3faacae786ecee4bd4a26faacf0cee341b321
SSDEEP
3072:+Cn9Sv9a5u++pekWnOKbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7lmHYW:Nya5u+kgnO0wvP6bQ7yMP+DE827sHYW
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
011eb653bd63e622e762934ad5192c7c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE