DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
04ba476b682f71ab2bcccaf3d2e564e5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04ba476b682f71ab2bcccaf3d2e564e5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04ba476b682f71ab2bcccaf3d2e564e5_JaffaCakes118
Size
25KB
MD5
04ba476b682f71ab2bcccaf3d2e564e5
SHA1
9fecfc53d301621c1e13251a7d7129be42581a58
SHA256
b15e6880bde824074b36703c2df898feb9eec31762431251e69583c6c0a1e838
SHA512
57afec2a91d5264b992f6019f63428a54c5a39927d15ae810eae0cfbb2c63706d94a9cf6f70f03919324a5604e3792fe6082399a49869fbc8e6be53151e1d12d
SSDEEP
768:LOXHcZnC5NolgN0u7F7kXXXXXXXXXXf7XXXXXXXXXXW1XXXXXXXXXX4AXXXXXXXh:LOX8ZnC5No2d2imajEAQH
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
04ba476b682f71ab2bcccaf3d2e564e5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE