DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
faeb94071a36783530f257a9fe4daa37_JaffaCakes118.dll
Resource
win7-20240215-en
Target
faeb94071a36783530f257a9fe4daa37_JaffaCakes118
Size
85KB
MD5
faeb94071a36783530f257a9fe4daa37
SHA1
bd588c7a0dbf1a4fce7be7bc72c0b446459f5bdf
SHA256
45eb0645d0134d5aa233baedab5b361bf90aae66a927c38a430cec3e00caec87
SHA512
b649ac788e80b1f6dad8ad48be309458b5e367b6dfc6dc9369fc0c841ea01d008e4342028071163df7a6ca6a95306920d3fd566b17b235274e77c2dd9a04495d
SSDEEP
1536:FfNl7netQxMkCNkKoogQhnF11vlefT7UF:vlcGMvNhuQhnF11vlOU
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
Processes:
resource |
---|
faeb94071a36783530f257a9fe4daa37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE