DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2464b43c5c67f37e9dafa5c1763eaf2d_JaffaCakes118.dll
Resource
win7-20240611-en
Target
2464b43c5c67f37e9dafa5c1763eaf2d_JaffaCakes118
Size
176KB
MD5
2464b43c5c67f37e9dafa5c1763eaf2d
SHA1
116af0e06cea6b0dfbaffe8051ebf9d93ddf41ae
SHA256
e93e8312751b46925c15bc34790587d3b9e48162be4707cba437111b7464c052
SHA512
a72ba2ce7a8b7ba9fae086022ca306225e516b2302fe3d45a4798e69288fc447d12cce65da5a2da0a22ecada3991fcde0ce99557b1bd9f6ca5efc2c26a8b5076
SSDEEP
3072:XrvoLnpgn9WRexlJsf+MP95FaLSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyf:Vn9TxAV1vwvP6bQ7yMP+DE827bg
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2464b43c5c67f37e9dafa5c1763eaf2d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE