DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
fcde801d663e0179428802eadaeb6333_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fcde801d663e0179428802eadaeb6333_JaffaCakes118
Size
194KB
MD5
fcde801d663e0179428802eadaeb6333
SHA1
6720ef474f588ca6d7211d8a0325a9e2436a600d
SHA256
04531f9c16dc124f9772f4d0b6083748a18bcdf99985830167a5dd77d6010bb9
SHA512
1129e532a2deb012b1a5314c89ac7746b6087d9d7981951633c0fbf2a3d79e03a1c9265689027a0f3d9d3d11b58438b602fb324ef69e6692cac2231b66395536
SSDEEP
3072:EILYp/6oDftXv4PHBWehnCUb4kJLkRz+cY0jiQhwiPn9Fj71KfCA1W2SnakmY:h897xX8YUnCMRJ4O0jpwiPn9FNKfvqtx
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
fcde801d663e0179428802eadaeb6333_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE