DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
006c63e0ea8cce38fffac82d33a511a9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
006c63e0ea8cce38fffac82d33a511a9_JaffaCakes118
Size
43KB
MD5
006c63e0ea8cce38fffac82d33a511a9
SHA1
b30fbffccc3a2394956c81c5d82644ed9c3188b6
SHA256
fa3d2ca09c176b72f8ee36c720b43b7b49f191703b0a4d3becf6cff99cbe0e28
SHA512
ba05b03e78655057d8ce5558a63a858e1912f3fdcda62760ea9d042b42d41c79326d9a51f3ae66abcb185ddf3fc37ccd7ebd10e7f0de88e776e7d6052aeb42d5
SSDEEP
768:/RVKWMlKz9eplh7DiVhBup1y0ERLlmvRWXExCha5x:/KlWYpfDiVc1y0QhmvRWXpo
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
006c63e0ea8cce38fffac82d33a511a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE