DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
def9bf85999d1f9ba0b78cb44e581f69_JaffaCakes118.dll
Resource
win7-20240903-en
Target
def9bf85999d1f9ba0b78cb44e581f69_JaffaCakes118
Size
174KB
MD5
def9bf85999d1f9ba0b78cb44e581f69
SHA1
e73ae67bbe431b5e9b19741e04b237b34879638c
SHA256
e224caaa55a54a134181d4221e6e87625c4ed1f986aac2ca72f218ffedf2966e
SHA512
c412cf1fa8e3d9d028ef98d890246716e006a26fd050a4037e81e02f26441d7adbfcd66657f42e9ecb7f7d76fb8f7e5fbf7fbf960d8d9f1383fd5055617b3af4
SSDEEP
3072:VlKV1k6wgKnwUijzWE5hApOR5NDSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFI:VU1iglUCChpBwvP6bQ7yMP+DE827YKW
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
def9bf85999d1f9ba0b78cb44e581f69_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE