DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
a1bd9bb0f74b14eb23bd232d66bbb1e5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a1bd9bb0f74b14eb23bd232d66bbb1e5_JaffaCakes118
Size
422KB
MD5
a1bd9bb0f74b14eb23bd232d66bbb1e5
SHA1
7aaa1f16f066d61b332dbfb9f1946488387ecb27
SHA256
f70218502793daa1a8e303bf2f552de6d7ef95f35d524992fd19c02e0dd4decc
SHA512
666c3c2022799e883b9362fffafb6746df9fdf8a283ad7a1c92a26312648d68d1b2a69c75b3b5ec9ea7c8603951a4e7e032613e1a186514f3523cc66ad7e2b68
SSDEEP
6144:ZiuwiajoQe6W6KhpHNa2B8hI966AGkAjOpoaY7Qqiwk7kx/v927kbJr4WVjo5fL1:Z6oQtoyq6xGJOpqA1kx/DJr4WFyfLP9
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a1bd9bb0f74b14eb23bd232d66bbb1e5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE