DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
XFlash
Behavioral task
behavioral1
Sample
0e25d8a295ef8ca03dde5ea5208f4d37_JaffaCakes118.dll
Resource
win7-20240508-en
Target
0e25d8a295ef8ca03dde5ea5208f4d37_JaffaCakes118
Size
446KB
MD5
0e25d8a295ef8ca03dde5ea5208f4d37
SHA1
5d3ea6a23aa04c7da4dcc6540d896a1f1ead5ec0
SHA256
cd155fe024f53c8ddb1c98b0a5c4ec811136bd93e29f1526c6a76de8823cafb2
SHA512
dd693f8f556ea87c74b108eb7c627d3074b3920430eb3474ab454357e4fe1b5e0d4e7e1b63296f93657f663bd2d484c0378222771f60486acd6a2a62870abfa4
SSDEEP
12288:qhCC6HYsC2YaJnvvorHyt6tSCjAEkPeWYWFDQKb4:4psBYaJnvvom6LjAzWWYWVQKb4
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0e25d8a295ef8ca03dde5ea5208f4d37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
XFlash
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE