DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
712fc8bd3857bbb791ce8be746f866d4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
712fc8bd3857bbb791ce8be746f866d4_JaffaCakes118
Size
64KB
MD5
712fc8bd3857bbb791ce8be746f866d4
SHA1
335fcd82182b3b0bf78bac7b6b72ad6c74d52df0
SHA256
a3c5c07891ac262f648c5486a7ad90948415baf33bda5894786206a44faa9df7
SHA512
c341c7fdc3a8d6b333300ac64526192fdafd5fc6a7740ee4a375aaf048d7e76d844fceb0db66ac8883b346130f827f86b7bb1bdc417e5f7894e2f8ca0078b0a9
SSDEEP
768:IcuO+DzbAElfs5y9geW1WKLHu37Ku2gVYxnha5:IXDRl05yJW1WKu37Kv+2
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
712fc8bd3857bbb791ce8be746f866d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE