DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IExploreSda
ServiceMain
WSPStartup
Behavioral task
behavioral1
Sample
45164921aea7ec7c2264ec08195252be_JaffaCakes118.dll
Resource
win7-20240704-en
Target
45164921aea7ec7c2264ec08195252be_JaffaCakes118
Size
84KB
MD5
45164921aea7ec7c2264ec08195252be
SHA1
5baf2928313639e0e0edca87b7121d15885bf6a0
SHA256
f0166829824e194ce44352b615d1534cb04062e7770f962aebab3ea195c257dc
SHA512
f0bcea2fda3f300eb613125aa54acd7b3d9261bdb6519dcda1985b852433750821e3b71a7ab5e741acd5a1481475f53907e7cae2f11c28b871c1a24daefda2fa
SSDEEP
1536:GMz+9MTZYGIl4Ik3etFfuZrDaHE4H6r5f4DSSXRuuRY45ul3B726:GTMdgF6vOfHw5fUSSXpRl5ulR
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
45164921aea7ec7c2264ec08195252be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IExploreSda
ServiceMain
WSPStartup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE