DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
04c97f404e07792581c8c1c9bf140bc4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04c97f404e07792581c8c1c9bf140bc4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04c97f404e07792581c8c1c9bf140bc4_JaffaCakes118
Size
179KB
MD5
04c97f404e07792581c8c1c9bf140bc4
SHA1
0a347c0aa04d992b23032f2d404569e19addc5fb
SHA256
b2d3160835c3eb079eac2a6024e72b28f4967e8405af573feb52cdb28bb0252e
SHA512
d23d7f6d5bf948941b019479a0e3d628a5e17e867ce72545c182a760968a1ad4b460ead83736c60a8baa05b80d81ccd0fff29a9743955cfa8a92ce8332fd8137
SSDEEP
3072:XR6HD9FsbRkZJCVStKIT4XbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7TBj:kD9yRkTtZT4rwvP6bQ7yMP+DE827TBZt
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
04c97f404e07792581c8c1c9bf140bc4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE