DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
4478a6acf073860e1cf2f3cd854f0b64_JaffaCakes118.dll
Resource
win7-20240705-en
Target
4478a6acf073860e1cf2f3cd854f0b64_JaffaCakes118
Size
194KB
MD5
4478a6acf073860e1cf2f3cd854f0b64
SHA1
2c15db2052cb1090a7c3eac2edcc9e325f110461
SHA256
7b8d6937266007c181a7d5239d289821e7297ba84bb6d0fc2c1f2f01c44e66ab
SHA512
2ed30aba07edc939efbd20135458848bb732a2092383dd76e68926c1b5bf32c0df895ad6f6e2e17dca2b094549704043a6ec1c305ef2874dfb6b239b3ae22def
SSDEEP
3072:EILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQht+n9Fj71KfCA1XFyfnaYmV:h897xX8YUnCMRJ4O0jpt+n9FNKf5FcBg
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
4478a6acf073860e1cf2f3cd854f0b64_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE