DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
86d18b36055e6e8a95ef9f323365e83d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
86d18b36055e6e8a95ef9f323365e83d_JaffaCakes118
Size
324KB
MD5
86d18b36055e6e8a95ef9f323365e83d
SHA1
2f9e7fc2fd9d4f3717629533b617b09746325dae
SHA256
ec8d60fe02ebd939470c02d945224420c9c59faa78afffed11ac611b9d68a141
SHA512
3611cb987b9fa0da773e14284c10156310de5675a0b9b6717dc8cb0afef72cafdbaecdacb32786733bd9431dfab4d10e43ffcd92887329c7bcd7677a72ecb205
SSDEEP
6144:0hhI966AGkAjOpoaY7hGAu+LG8tN8SWW0y+nC:6q6xGJOpqdVtLGDjhS
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
86d18b36055e6e8a95ef9f323365e83d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE