DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
48aa6dfecbbc3c4b98093f3d4e098e16_JaffaCakes118.dll
Resource
win7-20240704-en
Target
48aa6dfecbbc3c4b98093f3d4e098e16_JaffaCakes118
Size
185KB
MD5
48aa6dfecbbc3c4b98093f3d4e098e16
SHA1
ec7436eb935a607c61f9b7c6a21f632f921e8b7f
SHA256
ef642c8f200503ae0baa47d56e36b135d7e8dc81e95ef9d0dccc5310cbe3d573
SHA512
234d9fc73f0a266342d11d71f37a2ffbb99cfe0e431a91f512ca7bcf027256a780bc0b3ba12526e15665dd0433b398273c3b740be20ef60442a8d894ee3f3b07
SSDEEP
3072:u5AdcGxh+kxabOswf7jq2VKSeYrBTn1wPM3HMxqITXdr/O22Nk0vPkwZiF8dRVOy:Pfxh+kxs+5zeQBTn8McnXdrGrBimVP
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
48aa6dfecbbc3c4b98093f3d4e098e16_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE