DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3fc93d50d8062a2338944316fefd9605_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3fc93d50d8062a2338944316fefd9605_JaffaCakes118
Size
174KB
MD5
3fc93d50d8062a2338944316fefd9605
SHA1
7a76bfa558c348e1d9833de3d3ff85d8e8353c13
SHA256
3ec8766dcdb8dd4c4d399e122c84e27aae4f0b1b8f3fd9dcc21d36fca6028589
SHA512
4335348817435d37d0cb3d1b676599215f625b997544129849c9dffb42c595d1ae63492dcb338d14428a2578b93ba223da5a23138ccf89e02beef75c4bfd4c40
SSDEEP
3072:/FRn92L52eDZRCT6S05W4SbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7j:3Pe0xTwvP6bQ7yMP+DE827j
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3fc93d50d8062a2338944316fefd9605_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE