DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
SvchostEntry_W32Time
Behavioral task
behavioral1
Sample
f8cfd850edd15aa792070ffa2a837a80_JaffaCakes118.dll
Resource
win7-20231129-en
Target
f8cfd850edd15aa792070ffa2a837a80_JaffaCakes118
Size
281KB
MD5
f8cfd850edd15aa792070ffa2a837a80
SHA1
7b8cc200ce9cc0b057e6dca669cec6041bdfeb2b
SHA256
fef2e8420f9cfcabd2165cd0476ff25add1734f360464fd2cd4cccab3c26a961
SHA512
437723e21a462c90fcf5c8d590db3edb0649ce16d6c9973b200ea4092c72235c62d36a9580710bf178d71cc82037bf0d17e68eb01d4ac87b3c44a81d6c60c010
SSDEEP
6144:yY6MWRkkBgYLnmSMPqRYtZrnBJKN5B3+Wz0:yPZk12mSjYtRnm5B
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f8cfd850edd15aa792070ffa2a837a80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
SvchostEntry_W32Time
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE