DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b8f3c2444e5b7ce4eab003d27fd49459_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b8f3c2444e5b7ce4eab003d27fd49459_JaffaCakes118
Size
158KB
MD5
b8f3c2444e5b7ce4eab003d27fd49459
SHA1
1aa2d55cb983fbf51828e9900026281a9447280b
SHA256
67f681eea0e927f89051d47f53bab4c38407499b904adf61fc538e5a2bd4768f
SHA512
abd98fc21fa3fadfc4498311f1059892eea358a24750d4fe20f022ebf3ada484c2d4e209be7cbb8a0252068d4f5d8b3b13c60b66b5fe29edccc79471ed50244a
SSDEEP
3072:RH0pqJU+4U+5Zty1LbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7QaOvUW:qqJU+4b5kwvP6bQ7yMP+DE827Do
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b8f3c2444e5b7ce4eab003d27fd49459_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE