DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
416e3889c0a8961874324f14e8e98aed_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
416e3889c0a8961874324f14e8e98aed_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
416e3889c0a8961874324f14e8e98aed_JaffaCakes118
Size
140KB
MD5
416e3889c0a8961874324f14e8e98aed
SHA1
73e0a896ab702a5336504d7ebdc05f99c26461f3
SHA256
6b4feec99ca6693e7bf31a930e754a787229b2ce92da156ce7dead572212a115
SHA512
67e1bdcdde369173d9ae4c7f6b80a481dfdaf85e56e7dbc4ff2d111473394ed49e6244dceacd3ca5275342cfabd628e710337597a3695f39a6d73621fcc55ed2
SSDEEP
1536:HGRyxhzsBaX1x3w1UBXoAtDvkBLc/LZQoXiwV:HKyxh9Fxg1UBXJDvkh+9LV
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
416e3889c0a8961874324f14e8e98aed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE