DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
06711e6abfd34dfb24c904ccd1404370_JaffaCakes118.dll
Resource
win7-20240903-en
Target
06711e6abfd34dfb24c904ccd1404370_JaffaCakes118
Size
322KB
MD5
06711e6abfd34dfb24c904ccd1404370
SHA1
346fcae04c9aa9edfb3564a4f37414c9e49ebf34
SHA256
e80228cdf828e92c91159ad23199f13bc4c98dbee9925dd48c7636f87e23424c
SHA512
7883c114681132f1c0f798a3483996ee407d60f0451e2e3cd1f12230a9facf34b65d1659499165818511054540fbf6747394a201057d9dc232abcec9790392fd
SSDEEP
6144:no/GhI966AGkAjOpoaY7Rq/B6LO0vb3gFUEJ2dlkS7SQ1+:nGCq6xGJOpq16B6y0j36rk3kS7Sc+
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
06711e6abfd34dfb24c904ccd1404370_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInit
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE