DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
371560ed93a9fa9a388f414bd42dc732_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
371560ed93a9fa9a388f414bd42dc732_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
371560ed93a9fa9a388f414bd42dc732_JaffaCakes118
Size
364KB
MD5
371560ed93a9fa9a388f414bd42dc732
SHA1
be8a6b5738136bb0a4c0c624137649cafdf329e5
SHA256
19d5af673d7e0b89534ac7a9a481b8709c88f43dc760efe02909e03242b2f64e
SHA512
640a0b0f1885c4cd9b32092bc78fd8f65e44bd045550a9ca13d4c747a816345b6f37538ddc6816bd13b3c68677692574ff5a0bb36f7b2be1736cb925a09ac51b
SSDEEP
6144:8XeiHmKE21hCuhI966AGkAjOpoaY7DqrhPz6BLJ7cPQzGoSWX2HCGZDuT:sXhCKq6xGJOpq/qrh+Bl4PgGoqET
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
371560ed93a9fa9a388f414bd42dc732_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE