DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
5640a62da9397f1676722cc0e333ae71_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5640a62da9397f1676722cc0e333ae71_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
5640a62da9397f1676722cc0e333ae71_JaffaCakes118
Size
235KB
MD5
5640a62da9397f1676722cc0e333ae71
SHA1
84989f1d45348690291e8f19ea6f979decf576d8
SHA256
73dd1fa0f105d56a93899c06eac06589c6192484585e8fce17c1e8c512b2379a
SHA512
37acfa647d26258d091977e77678b0044d1cd852ca4e5c742360744fdc3857ae9194c1bb7f25ace196f8bd6300c9c492e6911e3f3791db854c43db1e16cc79da
SSDEEP
3072:9Y/PKgTvh83NRs5M9fI2LwiymTALHFa4yw5hQnmrLieH8nj2NAfzhcH5oU8i:y/VV4qyLwpmTgHFaBwMm/Lcj9zhcHm
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
5640a62da9397f1676722cc0e333ae71_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE