DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
SvchostEntry_W32Time
Behavioral task
behavioral1
Sample
f44d8894175ed5f03f09bf8a50bf9c83_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f44d8894175ed5f03f09bf8a50bf9c83_JaffaCakes118
Size
280KB
MD5
f44d8894175ed5f03f09bf8a50bf9c83
SHA1
a45c082e59e77b633acaff4bd84c662251df7c63
SHA256
36fcb4c054954e7ffe6290dc7a3fa7afe44411c8d948047c68d165c1982565fc
SHA512
cb7cd0c5915ad232e87ce2e1a1b37f386d730fec28d0355299b7ca057acf3a7a4e6b7598829f65f164c8c36affe6255416c59d91b570ac7d40e1e13d38234308
SSDEEP
6144:RhakVtcan/6slrUOGu9dNl13CjGOHCWA:RhFlnVlYOZHD1Olx
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f44d8894175ed5f03f09bf8a50bf9c83_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
SvchostEntry_W32Time
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE