DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
6f19d05b32769657eeb62c11683502e6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6f19d05b32769657eeb62c11683502e6_JaffaCakes118
Size
175KB
MD5
6f19d05b32769657eeb62c11683502e6
SHA1
2fd49468a8821acb9965f950573cfde8a40f6d06
SHA256
a578be700a4a27d9a8cc74a320daae0416aaa724bc1f5ca38f5e79b7d629062f
SHA512
e4ea411af606aba474aeba48b3184fc0ee1d139d9d586cbba7d866b7e3f6192d7df3ab78d041dde7bcdc8b40d68f8302709a9273c39b70adac38171c01e181ac
SSDEEP
3072:KMkdH1ufYBjqCAQXe4d5YR4SbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7O:dkdV22QQTAfwvP6bQ7yMP+DE827Op
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
6f19d05b32769657eeb62c11683502e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE