DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0aedfb56e26701c0ed179999261be1fe_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0aedfb56e26701c0ed179999261be1fe_JaffaCakes118
Size
112KB
MD5
0aedfb56e26701c0ed179999261be1fe
SHA1
609209d7606cbe124b5bf4dccabaeffc0bf44812
SHA256
ba42b7453058041b9c8ea9cd06dbf6389c836da5fb39ebca69d1de0f21c4dc65
SHA512
946bf2dd316bb9858133521b0c1aec119991a1a0914b3bb8d1b6a64123f2a3f3ea558a718a359e1c03a2b388edcebe3d3ce3df7128d63f0afe75889809f85dc9
SSDEEP
1536:8yGtoS9sVmo7uuTMNHCZ8pIKFcUjBtcwkgS/81yUeb7DpmZ1Ek:8yZ92uTMNHCZayH/81yU82
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0aedfb56e26701c0ed179999261be1fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE