DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2c01b8b98c5d2ff557abe40ec2d2942b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2c01b8b98c5d2ff557abe40ec2d2942b_JaffaCakes118
Size
194KB
MD5
2c01b8b98c5d2ff557abe40ec2d2942b
SHA1
298826382d9549872416fff6796ff35feae099bf
SHA256
eb8d0acfcc8bdbc68a13ec5b07e36e1081662a815761888f08957626e78caca3
SHA512
78625132c23067161bbf5b9233c7728c11a8f3d7d9bd8369ff2547e5066a632908d0a9f87efc7b4d0c2ebbddbd865b1950a4ae217a22f3c134a3f13cf0943257
SSDEEP
6144:AeoT/Emdf5QjprhjIjInOCigLfq2wj2F9qGpY4UOqQ:AemsmpGthjItgLrwjU93+4UOH
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2c01b8b98c5d2ff557abe40ec2d2942b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE