DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
065affe5f378899b84e968a3a3ac6469_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
065affe5f378899b84e968a3a3ac6469_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
065affe5f378899b84e968a3a3ac6469_JaffaCakes118
Size
184KB
MD5
065affe5f378899b84e968a3a3ac6469
SHA1
e35db7db688ca7b1ab8840e2bda4b6104bbcbedb
SHA256
104c326b987cdedd7e68851a2a1e45a0d5717b7e13df7105339cd718622383be
SHA512
1fdbc3b29afeb837cb9933a455c0b3ba6e5887a0e1a4ea958916edd33511ec58f106c048e4d077e5c4f801786b2d9308ff7b12d2c0c50f567ec5dbd6820e62e8
SSDEEP
3072:koZ7QfdRCycROqyi3mGRP03HrWnQ+bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxr:j7gfKRP03KnBwvP6bQ7yMP+DE827Rt
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
065affe5f378899b84e968a3a3ac6469_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE