DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
13a5765ad18e8d525364cd45b9c8a0c2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
13a5765ad18e8d525364cd45b9c8a0c2_JaffaCakes118
Size
85KB
MD5
13a5765ad18e8d525364cd45b9c8a0c2
SHA1
694c4de687df3c19822dff1cac8636b9ed25da3c
SHA256
c17f40e9336c9a578fdd0f657276756eaf9f6a63f6cdd704756a041a761f1555
SHA512
f061b039461b63a8094ee89710e275b96d650b3ec826f237e312dad79c835e77e8c5dff45567c34b34f52bf154df339c0d829ce63b1f13bfd690038898d18927
SSDEEP
768:lJal/8ohTj7Irb2rkDPrXpAbbJbYCc0bVB18ibvC1Kf1NS2lsNYpdljuVT7l5VwD:T2xK2APrXKbfJRX8ib6A1vlsQlAT7R
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
13a5765ad18e8d525364cd45b9c8a0c2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE