DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
24000f85ba1bf557cfb44db77d276db4_JaffaCakes118.dll
Resource
win7-20240419-en
Target
24000f85ba1bf557cfb44db77d276db4_JaffaCakes118
Size
177KB
MD5
24000f85ba1bf557cfb44db77d276db4
SHA1
ada02e0326edf297894a4123cbcc8fc3772fbc70
SHA256
fdf5ac773e326452abb5e1c6cae35db67adc5f75d3214e40501b28a746218c08
SHA512
9b83dc63a88ce2d3c121f3bb2ece3874cc0b26b905a10e5c998c029304a5b88347d70246ebfa1ca9c649be55a5af0f38d4aafff509c1ee280088a5cb740c6b36
SSDEEP
3072:xNWQYV2+eprJq+kscO7X4srSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7f:xMbV2+wQRscO4wvP6bQ7yMP+DE827b+W
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
24000f85ba1bf557cfb44db77d276db4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE