DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f1ea1404d139de03a8ff609ed25e1c0f_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f1ea1404d139de03a8ff609ed25e1c0f_JaffaCakes118
Size
176KB
MD5
f1ea1404d139de03a8ff609ed25e1c0f
SHA1
fb08df09c3fd04504d9975123d1320e00342653b
SHA256
79965e6e7315344c1c91aa8633a4fabe907f248a0f8c13ba730b3849611ce40f
SHA512
1e7fbca05369fae8a4b22b8da68fbb2dfd3365878a482ed2359092582a787be8cf513cda72ceb37cbba80cbec290730dd29f9a4769c5f69024a228519c28416b
SSDEEP
3072:lliwPJ+jGhc4tMUySyv9ijir3RY8SbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxo:75IotYSy1iWr3yrwvP6bQ7yMP+DE827Q
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f1ea1404d139de03a8ff609ed25e1c0f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE