DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
XFlash
Behavioral task
behavioral1
Sample
c12bca3e6ce07d24439e62a233a7b6da_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c12bca3e6ce07d24439e62a233a7b6da_JaffaCakes118
Size
445KB
MD5
c12bca3e6ce07d24439e62a233a7b6da
SHA1
0f0f532ff6ff4a21742939f7fa56bc42139274b3
SHA256
c7b0bdd474f8e0c7b43a778f5242d7d7ea12f8b8c5bd1ec0b8f27b24f3a4b6c8
SHA512
bbf8bcb1703139e7d8eb44de4734b27732f8c98af7cb0570b50c5bb62e86b441a104e84af276d60e75768c3a373b5e6862c1a738af123a12f1c2c6ea71d71d69
SSDEEP
6144:e7GGcFOkM6bIg0Qc/n7JJJJJJVegbsYxhP7tlrk6R1J6MMQbeWYWFDQq/bmZ:CB6OkTX1cplxRtJfRL9reWYWFDQKbw
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
c12bca3e6ce07d24439e62a233a7b6da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
XFlash
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE