DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
be876bf1b084d89233562b0abdb59cca_JaffaCakes118.dll
Resource
win7-20240708-en
Target
be876bf1b084d89233562b0abdb59cca_JaffaCakes118
Size
194KB
MD5
be876bf1b084d89233562b0abdb59cca
SHA1
0ef0e8977dd80b26c4dc9164159091dcd38c60ce
SHA256
6dc8ab14079ce327eba191bdfaeacfe55219aa2aa6aa8b000fc1ae8e24f48f1a
SHA512
8cc8ef16b3d02143a82c0bf1fa6a3c8de31755410c88e54e3a1ae385ce642f70735424b2cb8cde050cb13fbf1f6c0f0b34b4e49ba5e4e890f4543037b4ee26a3
SSDEEP
3072:iILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQhpXS9Fj71KfCA1qF4nasm1:P897xX8YUnCMRJ4O0jpRS9FNKfPpE
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
be876bf1b084d89233562b0abdb59cca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE