DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
823c4a92dd07b36c73dd990c902ffdea_JaffaCakes118.dll
Resource
win7-20240704-en
Target
823c4a92dd07b36c73dd990c902ffdea_JaffaCakes118
Size
175KB
MD5
823c4a92dd07b36c73dd990c902ffdea
SHA1
2d4ce4adb0752969e8ebb9ccc616490fe70a4377
SHA256
affe96fd1aef228cddce159c4132569f4cd0eaceadada4a5f240a22d113cb61c
SHA512
397a3f6c3b0d6a37d1499790ae9fdf746142e793c394932b980f76810c2c0fe83145c8b4b58140b11d0cc391300c258ed1e8ffe60a3321aef8ec622594d41d20
SSDEEP
3072:yAP29zi6JK0AOiM8vOLeihL/e1y95gFvSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfV:yAP29ziq5LnhLeOtwvP6bQ7yMP+DE82D
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
823c4a92dd07b36c73dd990c902ffdea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE