DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
6070d5eb8f7a4a238ea01260dbab7e1b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6070d5eb8f7a4a238ea01260dbab7e1b_JaffaCakes118
Size
441KB
MD5
6070d5eb8f7a4a238ea01260dbab7e1b
SHA1
cfdac81ad9eb2a616f4e34a65b03e51af46063dc
SHA256
fe1c781f5f0491fe8dca1c3d11cd83d834150f091ca869aac101844d14135a0c
SHA512
757879fa696d2d7f4bb7a267d02435881d3cdc973d4f9079029e2efda1f5cb24d2662df496896b2af5fd677328d875039dbf6216bf30db125fe9c73b21cd40ea
SSDEEP
12288:MryPGa2107uJ8OtTKzJdksQ8bE8FJcaGWhPNT:syf7mtTKzf5QiFGWP
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
6070d5eb8f7a4a238ea01260dbab7e1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE