DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
a926d4623e71dfd385be89bb1c1db4b8_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a926d4623e71dfd385be89bb1c1db4b8_JaffaCakes118
Size
191KB
MD5
a926d4623e71dfd385be89bb1c1db4b8
SHA1
a432e26af6a03b958ab91267dcfd817d24f41a48
SHA256
f0c039ba81154cb8a535e55679e56d58d21c9a909da278cc38a73936312e7152
SHA512
6e5755874ee19c48110cbdb96be772177c8190c74ddef8a6dcb86457f77d268ea11af0e4f78b41ce240aa8621a714072619661b4fec4b7112ceeb55531ffa720
SSDEEP
3072:bik5GxsK1h3sseoEK0FoynFUdSuLisw16MsjRDoILg5GPdIgqtAsL1PEcZ6Wle:b95MsK1IKAoyFUdj2r16fjR3LgaDsacQ
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a926d4623e71dfd385be89bb1c1db4b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE