DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
04ad2fb7899baf6deff3001c93a41e82_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04ad2fb7899baf6deff3001c93a41e82_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04ad2fb7899baf6deff3001c93a41e82_JaffaCakes118
Size
179KB
MD5
04ad2fb7899baf6deff3001c93a41e82
SHA1
19f8143fe3385845054c0ecb10bc85d84191f985
SHA256
7256a4f2b2f153895f87c3dd8a28e304d87b9dfc6dfad081a1bda0d19a807c74
SHA512
ce9b08d5e45b4afbcfa74aa924208e7846721f13fc9d6e0c79910177a8cff59866f577da48ae6d86fefbdd4e5f2a4669078deff1d5546e086018d620267f450f
SSDEEP
3072:j6mtxKah4LLngMruXnYLeQJvfCIxT1ebbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEO:um56LgfXYCMa9wvP6bQ7yMP+DE827Qkq
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
04ad2fb7899baf6deff3001c93a41e82_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE