DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
e991fa862f5a2693a1c3585bb9714fbd_JaffaCakes118.dll
Resource
win7-20240221-en
Target
e991fa862f5a2693a1c3585bb9714fbd_JaffaCakes118
Size
194KB
MD5
e991fa862f5a2693a1c3585bb9714fbd
SHA1
d26ecf225e69f07cd68e31fd8cccecc77192328f
SHA256
cc59a4a64b249de2281f781d6584d5bd35c14bd3d5b234deb520c9320fc2da70
SHA512
43f31ff4fd2aa32327c37fa359da5466ca3b6f62c814e9e8d4110cb505002b3d5a93a65445bd40b642ec709aa4b7c3d242db93f4addae3490c3eacebf567487e
SSDEEP
3072:iILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQhrMMOS9Fj71KfCA1TFna8m1:P897xX8YUnCMRJ4O0jpoMOS9FNKf3Z0
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
e991fa862f5a2693a1c3585bb9714fbd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE