DllRegisterServer
zipfile
Behavioral task
behavioral1
Sample
15fba0638143b8095f40f0dc6d4d1521_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15fba0638143b8095f40f0dc6d4d1521_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
15fba0638143b8095f40f0dc6d4d1521_JaffaCakes118
Size
374KB
MD5
15fba0638143b8095f40f0dc6d4d1521
SHA1
b48bfec6e4a8143db2e523e6426f8da36fe3eaf8
SHA256
cca8d1fc2350a4ba4c255171e2cc60e6a1997faa72d6af5e8e69a9f9108a2675
SHA512
3fbc486bb51edb9b34f614f7b0edcc507e5750691dccde6736fecc28a817bcd2864c5a2e53fed5d9893046ca7e2c88a9810186843c99e946707a088b6ec9e7c9
SSDEEP
6144:uUnUZmhoFyg9nIsXo6P3k1d8AzqNBG26sFltU1miCawmh7j8xD:uUnqmg9nIsX41d8yhrsFPi0KsD
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
15fba0638143b8095f40f0dc6d4d1521_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
zipfile
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE