DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
c81dc424040ee242ed73e2f30f2ee304_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c81dc424040ee242ed73e2f30f2ee304_JaffaCakes118
Size
175KB
MD5
c81dc424040ee242ed73e2f30f2ee304
SHA1
831ca78f8bc51d89ef1be50ad393aecb5198cc8c
SHA256
3cbf48bc8ca52fdc62657ea20d5b58a19be0b40b9fdd25771bd5c9ae965c47e8
SHA512
c1f2bf2c538a8be087e2cf116be78c37fcca5f424eb47bc0ae204a953390b5348964794ffc7051f899e32117bf524d28e8d3b2dd41a43ec9105f0c7726be5d6e
SSDEEP
3072:cwiZdYS7uqTaH2ntf59Y5Q5RFWSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyy:cwiZpuyjdzLdwvP6bQ7yMP+DE827FbP
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
c81dc424040ee242ed73e2f30f2ee304_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE