DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
fcb0f2ffcc6bacc3ad46349ea3f3a095_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fcb0f2ffcc6bacc3ad46349ea3f3a095_JaffaCakes118
Size
175KB
MD5
fcb0f2ffcc6bacc3ad46349ea3f3a095
SHA1
7667d3c33df7f0804bcf5c2915f102921857857c
SHA256
240ef67677df2be7b9838db0f142b4642597608c8f6f6f3ba90dc48ec778b01c
SHA512
fb20c2a908fe9472261ce77d8510cc853fd82641a1c850aaf03cdc8a675ca7c85a7ea84252564f0897a320656def28ba80f77f9f9ed41036016f05d07bd6dda8
SSDEEP
3072:9nFbR7pmCjnLoABRIMHSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7vr2f7:9nFbR7/LBRowvP6bQ7yMP+DE827D2Np
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fcb0f2ffcc6bacc3ad46349ea3f3a095_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE