DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ce230964db7dde67d535506cc8a409f3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce230964db7dde67d535506cc8a409f3_JaffaCakes118
Size
176KB
MD5
ce230964db7dde67d535506cc8a409f3
SHA1
4e64fa47cb9f11431dc632ff60c1bed813494e6b
SHA256
f3e602ad14190efe90100cea4a9f79685cbb0161db3fd0a1cd051fd03b48d838
SHA512
24435b5107ac8a71543fd0654dfcffb09e463281e2328b7b526eb0c76f8dea49a9ee325bdf399a103f526ae4861c0964aa1493402415627fef65fc103cdaf7f8
SSDEEP
3072:WUQ908W361sBQYNArkO51fSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU79d:my8Wq1sxNArknwvP6bQ7yMP+DE827zXf
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
ce230964db7dde67d535506cc8a409f3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE