DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2d996518221cab5304a024caa6cc0bd1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2d996518221cab5304a024caa6cc0bd1_JaffaCakes118
Size
102KB
MD5
2d996518221cab5304a024caa6cc0bd1
SHA1
0ba78b65fa9e4e5664159e77da90659cb3756c24
SHA256
dd5185947a847b496b5da6f2c1810c9ec0b3fe9b2dd4cf61919fd2da03d5ea05
SHA512
e4c98e9bb5b3af2e4e63fc6ec0de553bcde10dde28eece88405e8d098fcfbdea30e822403ab8dd2e3296133c577b8eecb4a164cacbf156b68d877830eec8700f
SSDEEP
1536:oBFy58oS9YCvnFsgpxbZlA5VOM6lIx5ihgE58:4FyJxkFsUVdlIx5jR
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2d996518221cab5304a024caa6cc0bd1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE