DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
af0f2c8e4b95634eabf7e9048c746e6f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
af0f2c8e4b95634eabf7e9048c746e6f_JaffaCakes118
Size
193KB
MD5
af0f2c8e4b95634eabf7e9048c746e6f
SHA1
28e3f360503b62a36c77ff724c8dec1c46f4c052
SHA256
d62440950f5f5ccb52d20cafcb6eb277f4df77bcea330be7f7f48e40fd3bdfd8
SHA512
d2b242782420841f2dfda6da0cc8e551bbc2b5360bbfb34cae6109a30cecb8af555b16bac6dcf6c4791990de643861613bdb370c74f6f86a7e515826842728ad
SSDEEP
6144:EeoT/Emdf5QjprhjIjInOCigLfq2wjKqGpY4U8Nz2f:EemsmpGthjItgLrwjK3+4U8Nz0
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
af0f2c8e4b95634eabf7e9048c746e6f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE