DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
538f7bc379e3beeeaaa3d3ccf87cd924_JaffaCakes118.dll
Resource
win7-20240903-en
Target
538f7bc379e3beeeaaa3d3ccf87cd924_JaffaCakes118
Size
173KB
MD5
538f7bc379e3beeeaaa3d3ccf87cd924
SHA1
40ea335a41a118dde3000beca66e35819de669ae
SHA256
7b3562192f44a16971eb27a1ffda2f7035ddcb338925194ade71cab6f383aee0
SHA512
edb25c8ac34bec1a754cd88d0b201c01f495d7f71b5f2101bbfb9fec87416e2f17724fb497d7d5858a03108ef538d0b88dd77cb0869c9390bd57ca413dcad9ff
SSDEEP
3072:zRkzbdLG/ZNr968Gj/aJwWjbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU77o:VE9G/br968s/JQwvP6bQ7yMP+DE827oR
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
538f7bc379e3beeeaaa3d3ccf87cd924_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE