DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ec7dfa6120c422d8c73654b525347f42_JaffaCakes118.dll
Resource
win7-20240221-en
Target
ec7dfa6120c422d8c73654b525347f42_JaffaCakes118
Size
194KB
MD5
ec7dfa6120c422d8c73654b525347f42
SHA1
a68f3c6d78307c870de603013488dcc28e5cd83a
SHA256
9bca8ac4677022e60eb75b60215bf4f1e80ae9626bc8ab760ad772c87dd75dde
SHA512
925b3c1ced0994d99342266cccd2ca821185e9c6325f3c4150930b8f41ffc9806ea19044a6f08f93fd20d53f723928b8dd99adcd3bd5fabc3f328cf03d32231d
SSDEEP
3072:uILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQh3BxBn9Fj71KfCA15naBms:L897xX8YUnCMRJ4O0jpfBn9FNKfLU9
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ec7dfa6120c422d8c73654b525347f42_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE