DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2bd8a2aad01f5b7047d68f58f28218be_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2bd8a2aad01f5b7047d68f58f28218be_JaffaCakes118
Size
186KB
MD5
2bd8a2aad01f5b7047d68f58f28218be
SHA1
40f2cda1372fdc7d0d5bcd3d3eeca4646125e784
SHA256
f00ed3b5bfba37b17c763c182e7d51c0e7e8768fd02ad54b7b7f0c4607cd1465
SHA512
734aab2e3462043713bea14d0b8f2381a1799c49b08f5e36bf7441014a945109e0694eeb06a769ee7443d920a4084ebef701bc2ec0c75dfb3b3e48fa71558875
SSDEEP
3072:i5AdcGxh+kxabOswf7jq2VKSeYrBTn1wPM3HMxqITXdr/O22Nk0vPkwZi5dRvm:zfxh+kxs+5zeQBTn8McnXdrGrBi1vm
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2bd8a2aad01f5b7047d68f58f28218be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE