DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IExploreSda
ServiceMain
WSPStartup
Behavioral task
behavioral1
Sample
8aec72e6d76ab58850301deca2de7b90_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8aec72e6d76ab58850301deca2de7b90_JaffaCakes118
Size
85KB
MD5
8aec72e6d76ab58850301deca2de7b90
SHA1
727e032f40ef7628570da28d49177a9571d80329
SHA256
64568e85a793e646b9e9423f8e8d61b932761a8a1f96c185cd9eeadf62754067
SHA512
534e3862f56ae378040ab5d125043b45355bfec420b8e414f2e8ccf10d306fa156d7ef166285f068880014f29923e5f17a8b447da8d5f8f6fefcac9638c95e5a
SSDEEP
1536:rAmQWaSa3jcBuRJA391mQitlsPxN4lbA+LFmRVwuwuT5NlBFclM:rAmZY4B+JK9sztls00qF4YuT5NlBFcq
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
8aec72e6d76ab58850301deca2de7b90_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IExploreSda
ServiceMain
WSPStartup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE