DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b8fceccb08fd234fb228e89648420ac6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b8fceccb08fd234fb228e89648420ac6_JaffaCakes118
Size
191KB
MD5
b8fceccb08fd234fb228e89648420ac6
SHA1
751cd3301fd0519db954902981cfe756a52b84b1
SHA256
4cff914a7bc46878511cb3d18b21c899bf2e8b3a14b395f6c20b91ff820aef57
SHA512
b083d9704a6ce24fd9277ae8ee656f87e697713117632e742541d1067799edee7e09775a52943b0dea5bb36963b981a99408812371714fd3f4176dcf060747ac
SSDEEP
3072:YVyor22z/YdJKhTY6cDN7kiZsIFcSsf9ApH7llZfNJbGVoyQ5WtaFEUCUUmQI8:YFYiT5G3gSM9AlJr3blyQNnQ3
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b8fceccb08fd234fb228e89648420ac6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE