DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
3ff07c7f96dbde8c7ae5fdc7fff4c753_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ff07c7f96dbde8c7ae5fdc7fff4c753_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3ff07c7f96dbde8c7ae5fdc7fff4c753_JaffaCakes118
Size
192KB
MD5
3ff07c7f96dbde8c7ae5fdc7fff4c753
SHA1
6bc707ee4813edf8dcf3b89b60d3f04934b03010
SHA256
de96ad89b4ae37a2cfe534f5d41fbfd8e9dc82f5812b938b5816b81e638f127b
SHA512
fc8c5fcb5a13344274019d7a956af6f25b69a503fabd4b70f10717d4400a429380e73e42d40baca3780b013d347f3f56f4bb503f9711b8ed203a5a1a36d7b5c8
SSDEEP
3072:WFwxledrD9in+F3cj2AvoIqCnheB96h4ZgTK+jDmJyksVqjOHJu9ramXu9r0:W6qdhi+1A3JhI966AGkAjOpoako0
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3ff07c7f96dbde8c7ae5fdc7fff4c753_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE