DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
109d5ea9a5d233a1bbcb71df2d42e45f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
109d5ea9a5d233a1bbcb71df2d42e45f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
109d5ea9a5d233a1bbcb71df2d42e45f_JaffaCakes118
Size
200KB
MD5
109d5ea9a5d233a1bbcb71df2d42e45f
SHA1
dac99fb76c1ac14ed4454942faaadf6dd5cfb154
SHA256
ce68e1b620f738397c015c62bc1b1a222b7bd3270f6b512eb4222b10df662a04
SHA512
c6e565d705fbb78eb5a9836033d8d20b3ab5d9352d7b8c8b5faed0ec163dc4795b77c93bf1676fd28908f42f98ed021a277e47fa5ab937ec9a9d36129b9d34d8
SSDEEP
6144:Z63aU+E41gCpizhcrOZzO2E4t8laLxY7OaJD:Z6qU+mDzhcryt8lZOaJ
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
109d5ea9a5d233a1bbcb71df2d42e45f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE