DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
430b863d628210e9674829a1f5cfeeb2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
430b863d628210e9674829a1f5cfeeb2_JaffaCakes118
Size
191KB
MD5
430b863d628210e9674829a1f5cfeeb2
SHA1
c25827bc65b71c7114270a24af9d0817158496d7
SHA256
a53088764e6df32acb0295d384a7973004f7eb6817b7ecdcb1c8f900e5d76317
SHA512
4bb5f35e3232a4652066ce5dcc2c2537a765b17b13177c12c321656532679838f69780103c2924aae87924aeb99c39f4276330cbfa183474d38d7dc408d0a194
SSDEEP
3072:YVyor22z/YdJKhTY6cDN7kiZsIFcSsf9ApH7llZfNJbGVoyQUB33C6UCUUmQIE8J:YFYiT5G3gSM9AlJr3blyQUh3KQy6qP
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
430b863d628210e9674829a1f5cfeeb2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE