DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
a6bfe210a97510265e8fd912a8b749ab_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a6bfe210a97510265e8fd912a8b749ab_JaffaCakes118
Size
64KB
MD5
a6bfe210a97510265e8fd912a8b749ab
SHA1
a96d95668eb60e5cd8a16a073b8823dc241a0038
SHA256
a52012455ae33d89f3a8504aad132f368480ca211e3989fd464d18c4c9aaf8b2
SHA512
0cce67db402b243c2d128b016fc98d3db391c5260566ececd72456d7fd9ea117474eda880e715185d2ad7cfcef92134768d5e552edafe3cd0410e0af4e1ac81e
SSDEEP
768:lSuO+DzbAElfs5y9geW1WKLHu37Ku2gVYxnha5:vDRl05yJW1WKu37Kv+2
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a6bfe210a97510265e8fd912a8b749ab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE