DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
03cd9005100ea7b506b17b27c8836bfa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03cd9005100ea7b506b17b27c8836bfa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
03cd9005100ea7b506b17b27c8836bfa_JaffaCakes118
Size
177KB
MD5
03cd9005100ea7b506b17b27c8836bfa
SHA1
ee2d4d40cfd0c56ae61e5eb0c6e571375b61108b
SHA256
9ea8f3cb497a4c7d5f2f862c91b99e840fca3748d10376af01545896a8a5bf27
SHA512
6d111f4460e38c541d38c14c1dc225aab78432425378d9459fa782d8a57cea7415f572523f727089e84abf007ea19b1bb4593abf4ee446105c1416c9d0316ba3
SSDEEP
3072:CyW5I/2LaC+YvHXdEsXbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7FUNXZD:hdYaC+sXdHwvP6bQ7yMP+DE827FUtB
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
03cd9005100ea7b506b17b27c8836bfa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE