DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
945d308a80477fec8181e06d5feb89fe_JaffaCakes118.dll
Resource
win7-20240705-en
Target
945d308a80477fec8181e06d5feb89fe_JaffaCakes118
Size
320KB
MD5
945d308a80477fec8181e06d5feb89fe
SHA1
d46b1caad9e988906bff127813971f168c3b6d14
SHA256
6bd8f889948106fba3fc71d9ab509c1ec2e56a8debe2e9a747bfbc10449bec81
SHA512
34fb75253c52744330d23eb33d821631541ac6bbd44eed03e1034cca8d827d14d8958e22345b18dfe262aa7632f6b760f224a944ddb64e1e55180ecf013113d3
SSDEEP
6144:MDDAhI966AGkAjOpoaY750C+IA3D2vC9RjFTP8NhcGpeul:aDoq6xGJOpqCV3CU2cGpP
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
945d308a80477fec8181e06d5feb89fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE