DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
StpLogSVc
SvchostEntry_W32Time
Behavioral task
behavioral1
Sample
bfb3466301c88a645cef27874ba62875_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bfb3466301c88a645cef27874ba62875_JaffaCakes118
Size
280KB
MD5
bfb3466301c88a645cef27874ba62875
SHA1
20f99df3b15e44b72408f9d433548a1d3d1ff6ad
SHA256
c6dda9ce8539e04662e2f43c95ae5cde7bd0c94522edd308e17b7231c0d7fc34
SHA512
e606d1348c852266f2668064f0ca27e8a07b911f3700d809efa991bb083eaa19c8d3489d7d286364083c42a9a7f803a0788c5320a827bbfcbe41efbf3f3bd178
SSDEEP
6144:8fgDJVC4QoK0sbvFtkqkzq6Qc7fdfrBLCWEpmJfJv+:84drPsbuzq6357EpmJh
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
bfb3466301c88a645cef27874ba62875_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
StpLogSVc
SvchostEntry_W32Time
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE