DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
00e2e1c6f5e046b4ee07ffb4ebe17870_JaffaCakes118.dll
Resource
win7-20240611-en
Target
00e2e1c6f5e046b4ee07ffb4ebe17870_JaffaCakes118
Size
258KB
MD5
00e2e1c6f5e046b4ee07ffb4ebe17870
SHA1
b736b29fe4d386f0d846a7147d4655de0cbe46c5
SHA256
d001850dc2a599d8697b0d08b83b949a3eb0d3ee8be285c0f6b0c57ccc0dda2a
SHA512
595cff68fa369d60e70f8b8b09717934194a9ec7cdbf582203d0b32189af08036f2512c7dbc7e530f73783064f887ee391735bd200dfdb7e53c1c9b67a33250d
SSDEEP
6144:FISJtidQS2tVRGiwI27o4KOYbkiK4J+4tfWWdh/CWf/:tidQB3Rtwlk4SQiK4JA4/x
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
00e2e1c6f5e046b4ee07ffb4ebe17870_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE