DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
82cea6cb0442104554afb188b1596592_JaffaCakes118.dll
Resource
win7-20240708-en
Target
82cea6cb0442104554afb188b1596592_JaffaCakes118
Size
44KB
MD5
82cea6cb0442104554afb188b1596592
SHA1
8b84cbba743b676af0775a88e16f1efdb378e95c
SHA256
bcb3af20804de8f64235e2143e2c16ed2d1527809ec55138e52e03ca952bc647
SHA512
edd057dd0ed71cdc0bc29a4ce30fdc21788a431a25d3f4c271f0d0d96cc2f39dfb774a4cfbbbc452890246fe150263114f51d12124467ada60ad56e3d1e238ac
SSDEEP
768:ZbgR66EJF8uLEEkr5JjBYKp1Jk1oBCJ8R7XLbXx3ha5:D/L9A5h1JkeBCA7XLbL
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
82cea6cb0442104554afb188b1596592_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE