DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
10ac1e9655d32db08417747342c8526e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
10ac1e9655d32db08417747342c8526e_JaffaCakes118
Size
102KB
MD5
10ac1e9655d32db08417747342c8526e
SHA1
d94cd73b4661cbeed3dc108550931bf7bd1a8419
SHA256
d2961a64826dea188dce0f7c9d1d997f0d7d11416821ed917967630488af7e4f
SHA512
66fcc93d86051d64e52ced1ab44b89fd1cea06fa326561e7023a0fb2d49a41923870eb904a9107afa6070dd89b7e931a70d726870c3b355b9a61bfc62703097d
SSDEEP
1536:1BFy58oS9YCvnFsgpxbZlA5VOM6lIx5ihgE58:bFyJxkFsUVdlIx5jR
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
10ac1e9655d32db08417747342c8526e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE