DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bfe5ca69ca7b71d18c7de0bcdc3ba626_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bfe5ca69ca7b71d18c7de0bcdc3ba626_JaffaCakes118
Size
187KB
MD5
bfe5ca69ca7b71d18c7de0bcdc3ba626
SHA1
ddce3521c30b8bdc61c11292eea7537a7e3b90f8
SHA256
9080b11b96a64ebe04c460be51060d20d0b7923f301b4ef4f570ff9da0ec2ee1
SHA512
def956e848edc1a0dd609b36a7d798c2b8e1eaf896b4dbe79ab9922438f9c69c6186b0129baaa4b1613fe46927c3af52072839e04a9e8e67b6dc0011c3164465
SSDEEP
3072:MW+WjepahS7qC19YZP8I2LjVJQO2JT1LNbwdSVmET78eiPyhMFpe:MW+WjepyS7qE9lLoVJhRbwdSVBziPgMq
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
bfe5ca69ca7b71d18c7de0bcdc3ba626_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE