DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
8764df5570456b77e31a7583776196e1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8764df5570456b77e31a7583776196e1_JaffaCakes118
Size
82KB
MD5
8764df5570456b77e31a7583776196e1
SHA1
9fc4671a4ec50e3943e77616a1346a29d036c4ed
SHA256
0a8548d4ca2c04d6857d1295755443e293c30dce60a0862f5c8ccbbb8a51bded
SHA512
13c41318391a9c87005baff4f7bf5ad2f96f1e385f2682a5f0f470e05c98e15c0d2145d15322ab1975408390ac365ceb40256f50beff7093fd4561566746ae4f
SSDEEP
1536:MdqDKV0khgjTxhW5SDzj2c8LDvNb3aQ3Vdq9:MdqDw0KehwSDdKTJaQldq9
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
8764df5570456b77e31a7583776196e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE