DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
04ece7e030362d4f897a8b6c2ae3c830_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04ece7e030362d4f897a8b6c2ae3c830_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
04ece7e030362d4f897a8b6c2ae3c830_JaffaCakes118
Size
180KB
MD5
04ece7e030362d4f897a8b6c2ae3c830
SHA1
d26259f6025be4cc0aa04f811ab9ca8231e90421
SHA256
a445a8cb8f37384a36d4b0891090d03093ae212a1a151dacef60ed401532d302
SHA512
1d222b4943726468f2d3c28a6631a726b656f45ca8e05858c7fde19fd1fdf578654d05764814158d0007c1af536e777eea07beb7c06e5748e8d99b2031ece5a8
SSDEEP
3072:4aL/N9eVDaOpUwjYHJPwRbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7vB/i:vhMj8H25wvP6bQ7yMP+DE827vBcp
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
04ece7e030362d4f897a8b6c2ae3c830_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE