DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
fecf0903386e85532ea65823a342f36f_JaffaCakes118.dll
Resource
win7-20240221-en
Target
fecf0903386e85532ea65823a342f36f_JaffaCakes118
Size
64KB
MD5
fecf0903386e85532ea65823a342f36f
SHA1
2d466987026a264ad6f6241194a20d752ddc4d29
SHA256
8e83449f547171aeba04d3e2b7b2c7cd55086b1af86ba47976db210a309819f1
SHA512
6d4ff45c3edf8f0060c1c2f998ddca761dd425fbe09b4c558e808ca038632df28f89cdfd9c092ace6ab0657ad308cee7a88296708f1322050ccb73ed877097c1
SSDEEP
768:PuO+DzbAElfs5y9geW1WKLHu37Ku2gVYxnha5:aDRl05yJW1WKu37Kv+2
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fecf0903386e85532ea65823a342f36f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE