DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
SvchostEntry_W32Time
Behavioral task
behavioral1
Sample
fa47629e8992a4ea32984b7665c60156_JaffaCakes118.dll
Resource
win7-20240221-en
Target
fa47629e8992a4ea32984b7665c60156_JaffaCakes118
Size
281KB
MD5
fa47629e8992a4ea32984b7665c60156
SHA1
06130b24abcd4763da061a7f40568aec106fff4c
SHA256
174c3790f24e998ad96e52a97ffac6da1dd7984a0102728e701c38b64de1bb1c
SHA512
5c3511a889233251c3e0315cf54c4623672845ba6d4349ee4a873d261d19a6bb891fbafe0976e9902653cd516d780f27c2b608312cd25344ee193ab9f08d4127
SSDEEP
6144:kY6eu17OjGXcqzA5t3GSZo9MBTPcHgDXM/0DYyrUPQ:kPeu1ajGMd5t2ko94TEyXw0My
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fa47629e8992a4ea32984b7665c60156_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
SvchostEntry_W32Time
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE