DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
03c1eccfcf514ab1850279d89e06fe2a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03c1eccfcf514ab1850279d89e06fe2a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
03c1eccfcf514ab1850279d89e06fe2a_JaffaCakes118
Size
183KB
MD5
03c1eccfcf514ab1850279d89e06fe2a
SHA1
6ef83fd8f5741e976ddb6bd90d92e98c2268a105
SHA256
6feab99f4668ddb7b711dc15b82f4c937b00c43896e89a230b5093bd7633797b
SHA512
c6cd1834b94df0d7b043899253ddd1019d8fcb329ef62d172b0e8ae1eba962ee8043c93661d0b51900be3198734262e6892ec94cd3300c67b013da3f3b36992c
SSDEEP
3072:zMzeTdFdp9Aremk8MhXaVhSaLzU1obbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxK:w6TdR9ArLaFayacYwvP6bQ7yMP+DE82G
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
03c1eccfcf514ab1850279d89e06fe2a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE