DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
1c5a34d0d5c1ae267029e537419bd4f8_JaffaCakes118.dll
Resource
win7-20240221-en
Target
1c5a34d0d5c1ae267029e537419bd4f8_JaffaCakes118
Size
656KB
MD5
1c5a34d0d5c1ae267029e537419bd4f8
SHA1
f237ff02a3374e7665a426a93bf614bab8471202
SHA256
a4b103c43a2a15d22a05e233ab993e7eaea71e858f5b8e65a4c4909b8a1d3ed2
SHA512
dcdb3b68fa94b7b634b42b8c0da0eb765ee5d7e6ecd854ee4b69b97778eca8ddad1a60703da751d2e15771413edb683bfce2f0819377de51ea8fe6d2330b2f5d
SSDEEP
12288:px6OmNvblOiCJR2OXkYTDJLxr30CKwid+PIVA7gelQGQPDq:px6PvblO623TFxrkogzGQPDq
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
1c5a34d0d5c1ae267029e537419bd4f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE