DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
48cbcfa6bd80361f5cd6307ff678a1b8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
48cbcfa6bd80361f5cd6307ff678a1b8_JaffaCakes118
Size
194KB
MD5
48cbcfa6bd80361f5cd6307ff678a1b8
SHA1
01cc70a5156ac7a20a09bdc72e826f3e0486f250
SHA256
19cc3a7b3f8bd39987ec9bb72d80c0a9a21306c447749ddd4026bf733a3fba69
SHA512
95da24de22ecbf42c1c8315425c72c6c9e9cac07d64670e3426a13b8e4bcb963c9ae308fc61b4369b92f4179d623de98807d287b35c1785216e982d5fa4e04d6
SSDEEP
3072:iILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQhW6/S9Fj71KfCA1MnakmC:P897xX8YUnCMRJ4O0jpp/S9FNKfOhX
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
48cbcfa6bd80361f5cd6307ff678a1b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE