DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f22056178a6fe8efeea060a2263c7987_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f22056178a6fe8efeea060a2263c7987_JaffaCakes118
Size
47KB
MD5
f22056178a6fe8efeea060a2263c7987
SHA1
97cf27d127c535b92a0483790b414967110d05bc
SHA256
25b7adda488d21b8e3359ce0dddd598a85cd6ae3b07910dcc29e0c7a9afc077d
SHA512
41ab0a77796f4bb321877c932d5029b1743bcbea07f5379be36f5dd125a9717c86ba2405fdd3e4b2219094419d0f0e8856f745cec2e7c7d525a6e3f881ab3681
SSDEEP
768:P+Ehfh4p1YrcVd/JoaxVH/yPGUYuMRup1y08FhFXhXdxcLibHWexiha5B:r6LWGxNPH/y+D21y08ZXhXdeik4
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f22056178a6fe8efeea060a2263c7987_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE