DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
af58a777684d87203e3a1b7c23d2b2f0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
af58a777684d87203e3a1b7c23d2b2f0_JaffaCakes118
Size
194KB
MD5
af58a777684d87203e3a1b7c23d2b2f0
SHA1
3e0c3fa170f5d8bf473fb7f7017316a5fd097643
SHA256
f087e9d2a0ca327e956cb13ddd474cc5327b5fbffaed857251e328ba93f64b1d
SHA512
885d598b03ab1b5304bb17d60822af70937b220e191b8edddfadace272208b6de64640f201a95292e2175cb12e86a8f9885db69e4a59f50b40808debf6d3a43c
SSDEEP
3072:uILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQhmrD9Fj71KfCA1XOnalmg:L897xX8YUnCMRJ4O0jpCD9FNKf0Yh
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
af58a777684d87203e3a1b7c23d2b2f0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE