DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
77f4fae722a744a904797668fd8db160_JaffaCakes118.dll
Resource
win7-20240704-en
Target
77f4fae722a744a904797668fd8db160_JaffaCakes118
Size
191KB
MD5
77f4fae722a744a904797668fd8db160
SHA1
49d23544d132059fd756b8fe04434a877ac9c025
SHA256
077640e521a5491d376688b9685731388dc1e2ece98bd5bd28e4aeb2a59befd0
SHA512
b602da144fee97b8d9413ef8bc985240dc06bb89370823b5e5d9f621780ebc930e277c4ca1e55910a6f576cc20d2a54cf8e573e565d2f8195ad07f73eaa921ae
SSDEEP
3072:xItQSV3KIPd+oG5zDSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7kdjLeD/:PSB82wvP6bQ7yMP+DE827wLS/
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
77f4fae722a744a904797668fd8db160_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE