DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
Behavioral task
behavioral1
Sample
5342c4ff957facc054991ed84ae518b6_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5342c4ff957facc054991ed84ae518b6_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
5342c4ff957facc054991ed84ae518b6_JaffaCakes118
Size
361KB
MD5
5342c4ff957facc054991ed84ae518b6
SHA1
33bb87a39bfc4e59aa3f3863e94ef3666b5f4814
SHA256
b08e9afa8ac4d6b1217c89280f74519bafc7d2da851d27919580f869533fd77a
SHA512
86e32572fd0599cd8b48aa64b64bf0343aa41a7f467aaf50c1d20a14ddfc6910d39e0d3764356734aa36842288e679c2b8867b3ad27ca499eb06caa34e6d6567
SSDEEP
6144:ygljDCUWJ/whI966AGkAjOpoaY7oUO5cjf4G0j9ZlrDwSuW+kmI4GCnJj:yeDCUKQq6xGJOpqU15cjo/lfJxVGJj
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
5342c4ff957facc054991ed84ae518b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllStart
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE