DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ace25b65028c3d5a7c7d4ecb19445d5d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ace25b65028c3d5a7c7d4ecb19445d5d_JaffaCakes118
Size
194KB
MD5
ace25b65028c3d5a7c7d4ecb19445d5d
SHA1
276798351243abd54772073f47d7904f2bde5bc2
SHA256
c6cfde147391a35c6e1380a692f41751839e7155722eb6dfd7024f99e4a370b6
SHA512
129c0e469431feef1ace79766873909d75d16ede715839c3ef80e8419f65e363174863756a6671b7ccf0d49238ac671ac1bdb30f6e4776d9692fa7c5fcb6df4c
SSDEEP
3072:iILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQhpXS9Fj71KfCA1qF4nasmS:P897xX8YUnCMRJ4O0jpRS9FNKfPpz
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ace25b65028c3d5a7c7d4ecb19445d5d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE