DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
352498a891a55c47653d65ddf1aae240_JaffaCakes118.dll
Resource
win7-20240704-en
Target
352498a891a55c47653d65ddf1aae240_JaffaCakes118
Size
85KB
MD5
352498a891a55c47653d65ddf1aae240
SHA1
7a7487276b44a299d7b234ccf662d453596b8308
SHA256
f7d5afafc0a17040c7879018e276ecca6fe640703e4f0793fb074ecbe57c9453
SHA512
c0fda6b2e6464f48829e1a198115edb36e2ca97c55201c65804b27a908045643883a6c98ae0c065a8e06736801b149567b162301095e98f2c53eb48157cffece
SSDEEP
1536:Mblb4Utj8yHBmdaj7q3a5qow22mYijG11vlblIWMT7qF:MbN4HygYPGgq1AG11vl5IW4q
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
352498a891a55c47653d65ddf1aae240_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE