DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f715c91115a8c9d9d3e3e804bb76e0c5_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f715c91115a8c9d9d3e3e804bb76e0c5_JaffaCakes118
Size
423KB
MD5
f715c91115a8c9d9d3e3e804bb76e0c5
SHA1
8416fd597f0ec9399713ebb210ce6154fdc78a93
SHA256
a8e479728616cac7dec81cd2ad9e6b818e7137c2fc464fb3a93c66e882d37736
SHA512
5ae15b08b706b50bde4a3ad24bcbc87baa658e587b411dcac9b8c115164eae83127086c5d02709fa67c5a9ee9621ccbe49003418af7c49a531fd5bb8a34b27f9
SSDEEP
6144:aHitHRYQahRBMViahTpHNa7oyhI966AGkAjOpoaY7a4xNgYdnROCDrReCt9B75Ul:aCtu7RBMVphV/eq6xGJOpqPTxROK1Tda
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f715c91115a8c9d9d3e3e804bb76e0c5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE