DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
e27d51d7e01fa09a1a258119e90c7065_JaffaCakes118.dll
Resource
win7-20231129-en
Target
e27d51d7e01fa09a1a258119e90c7065_JaffaCakes118
Size
151KB
MD5
e27d51d7e01fa09a1a258119e90c7065
SHA1
f25178e3ef3918eb64bdb5d9a649bb1dd39f4b2e
SHA256
ba244794483eabdf6c8dcac0cef2e9790aa396054679e3417ad9ab852ad948f6
SHA512
15f327161ac0d261ed5a0908cb3fb08ddaa4749e877699cc07a02c2cb799d0ec2d9e1f694a9de710744049ea962a8d710a8eee030dc4e071150a0f7033ab3d3b
SSDEEP
3072:cDfwL7zD0htAdUOitn6bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7/dSU:5QhtAdUiwvP6bQ7yMP+DE827/B
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
e27d51d7e01fa09a1a258119e90c7065_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE