DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
35cb30d3ffa1b6d069fc3eaef3ae5c97_JaffaCakes118.dll
Resource
win7-20240705-en
Target
35cb30d3ffa1b6d069fc3eaef3ae5c97_JaffaCakes118
Size
157KB
MD5
35cb30d3ffa1b6d069fc3eaef3ae5c97
SHA1
56a0db24390d1e5f79f8af51a15a235118b15829
SHA256
aafd5fb1f4bfe8c1622bf031c4f713889a9a3216aab1bbda2e17deb2c309e08f
SHA512
3a7ba6eb7cf9a4ddec832856ace6964fc9d7915084b3d258afb6a2fcce06e5510c5d8a4489d8dd4e075b8959c681725fc5a861fe96d44abd4c4c73953c32882e
SSDEEP
3072:dTnZOmNtghuMDTZbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7rsQsP:dTZOuOd3BwvP6bQ7yMP+DE827rng
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
35cb30d3ffa1b6d069fc3eaef3ae5c97_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE