DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
61f0277ba301b5122b72fe2687e5b3a0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
61f0277ba301b5122b72fe2687e5b3a0_JaffaCakes118
Size
191KB
MD5
61f0277ba301b5122b72fe2687e5b3a0
SHA1
59b4a1089146362402dea33dd8f529f9ffc43ea4
SHA256
12ebddaaa6f05acd1a737877ada3f803f1c40ae4f27d1f635cf686cc73773680
SHA512
6ba109ca39c99ff29f9adeb02866a869ed44a7c991d69bf8878411b13625acbf65aceaf073afad43ab49e7c83c271f8b140d06d3d845119903a1b7a8f62b3d5f
SSDEEP
3072:qVyor22z/YdJKhTY6cDN7kiZsIFcSsf9ApH7llZfNJbGVoyQjJFbzEUCUUmQIKyn:qFYiT5G3gSM9AlJr3blyQFFdQhyn
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
61f0277ba301b5122b72fe2687e5b3a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE