DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
489257a29cfd4d762797bf859e29abd0_JaffaCakes118.dll
Resource
win7-20240705-en
Target
489257a29cfd4d762797bf859e29abd0_JaffaCakes118
Size
191KB
MD5
489257a29cfd4d762797bf859e29abd0
SHA1
6c5095c22ff0aeaac7ba8d6082e8ad45d4fcbf05
SHA256
f9fc43da31a6fe74cc7487630d843029b4148ffcf3aacc2d4cc339b8f5161240
SHA512
7fecd916c5418020359c2a34cdce3a26e54da344d9090ce4f6bb624bb2437bf468b0c09cbf8b142cfcdd302fc78661f052da08512672848490e84cfa422c43aa
SSDEEP
3072:biyUumlsxZ1Icv6yYZAzCbWWDC1JL+O1w0dbyfCL954qX3GBUSM5J4cZ6x99XQJ:bwuks6cvbYGzCDDwL+O1Ppz4hBUhGcZx
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
489257a29cfd4d762797bf859e29abd0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE