DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
1c2773b2bfda1f78c442f3aaa55840a9_JaffaCakes118.dll
Resource
win7-20231129-en
Target
1c2773b2bfda1f78c442f3aaa55840a9_JaffaCakes118
Size
422KB
MD5
1c2773b2bfda1f78c442f3aaa55840a9
SHA1
bc50ab4c67a92f8977f3334f0aaa5e246792ff02
SHA256
1e33c24353d8cdb506081d07a253240097fd0d5e23de3595b3959522f50a035b
SHA512
1f81644c74549204a3bf7739fb4da7ec22966bded9c97e76fc139a23142ba5df0a9cbf05b69819dc0e82d2ddd955db0d21a08377a3adc0e3c73cecf3d66f6b87
SSDEEP
6144:nZEyRewOXh4AuEpgRt5pHNJshI966AGkAjOpoaY7paVPHnuAKgEJ9CnVOW:nayRegAuC2b8q6xGJOpqIVWAKxJ8nVOW
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
1c2773b2bfda1f78c442f3aaa55840a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE