DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
29fbb2c7e72997aeb630dc3a482b542f_JaffaCakes118.dll
Resource
win7-20240220-en
Target
29fbb2c7e72997aeb630dc3a482b542f_JaffaCakes118
Size
194KB
MD5
29fbb2c7e72997aeb630dc3a482b542f
SHA1
44bc43ec914779d14e03a13ad9f5f08cf8817eab
SHA256
c9b0a0bb738b24d0983fc15c764341d88df44d9ba36b3c825ce41b0c181b1143
SHA512
1973b84ffcf75be6d4abca736b3d30826b1f7c6e96b30e986cee53df58ca95302c6d6da7f2b4f74771e0441413ca59d989467fffdf3e63136d4e83f4ba7d836a
SSDEEP
3072:iILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQhW6/S9Fj71KfCA1Mnakmn:P897xX8YUnCMRJ4O0jpp/S9FNKfOhK
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
29fbb2c7e72997aeb630dc3a482b542f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE