DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3a0f4795b8622c6d3fbcb5df99a0d95e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3a0f4795b8622c6d3fbcb5df99a0d95e_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3a0f4795b8622c6d3fbcb5df99a0d95e_JaffaCakes118
Size
183KB
MD5
3a0f4795b8622c6d3fbcb5df99a0d95e
SHA1
25c858ae8a01bc1850438ab8e64e489283b87e51
SHA256
b6b9767df3a49485abad13492352a3863c27eefe31074b15b535160c28474d8a
SHA512
3c348db47b7d558395acdd31e0230ac7dc55e6169083774834fab7f8b9e8aeb12a330a92fe8b8a6f388fda5e60a172724e04873674119b0187aa775116f57416
SSDEEP
3072:OHyYvCTH/SPJLab1d43RUJlSQslYIXHNNyUIOeWU6AYJyy6Q44dP4szCNcqS:57D4BUbSxl3Xu0eH6vJyylbd3C2qS
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3a0f4795b8622c6d3fbcb5df99a0d95e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE