DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f2ca7ad4dd1895973793c8d226d1ca04_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f2ca7ad4dd1895973793c8d226d1ca04_JaffaCakes118
Size
194KB
MD5
f2ca7ad4dd1895973793c8d226d1ca04
SHA1
30e2fbf0db3e33b09329ec71af46f5318c1126d7
SHA256
59b613290b00118ee7bff6149e588fda2404b6ce96d46a2b89cc97518823334f
SHA512
c9cd7bc55c4461432d022353f8e69aa243bad9c0c9e8058ce32fefc316adcd12a2caf2c6a6e9ba0851151a37824dce70dde69a9959e772499e763fe37c9cdae8
SSDEEP
3072:EILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQhoHRn9Fj71KfCA1OvQHnapmK:h897xX8YUnCMRJ4O0jpoxn9FNKf4OQP
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f2ca7ad4dd1895973793c8d226d1ca04_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE