DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
26274d2731afa0b9e14c66e1ee760626_JaffaCakes118.dll
Resource
win7-20240708-en
Target
26274d2731afa0b9e14c66e1ee760626_JaffaCakes118
Size
42KB
MD5
26274d2731afa0b9e14c66e1ee760626
SHA1
15c8b123885918b6c08fc54ea6e2b92953679b24
SHA256
bf2b3d768089ad377f6f91148925608b78f92dbacdf4adbb14fcff275b06df2a
SHA512
bca52e05af8ae1dffd59b6cdc6be0f077a7ff0633c9c473bb0e6bff482d332124eacf981e2c932a77678d89b8adfe079dc1604f01fbfdef04bade99d51e92e67
SSDEEP
768:0fWLGtsqST282ngQKp1JkwHwlzeFofxzha5A:g6GtspT2mR1JkYCzeObt
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
26274d2731afa0b9e14c66e1ee760626_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE