DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
55c0b3104a74e05fc93490025a5623b9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
55c0b3104a74e05fc93490025a5623b9_JaffaCakes118
Size
119KB
MD5
55c0b3104a74e05fc93490025a5623b9
SHA1
a043f296d0f80c2391f0ba7ffa28a1e78f9e6c66
SHA256
fc95a56772d02c87d2029ae277e49402a492a9856d4d1b21ae663d7917125501
SHA512
f319107e6d26c08a31731a175630bf963618fbf3c0f8e8a026f2dcc01e3100037ca3e9ba37dc45ee7914e75e6e3c163f97b7fee5a5e3eb89a86c693cc30b0906
SSDEEP
1536:ayGMnS9iMh82leTM5nP4R5HZRIv6WagAkgawkNTd1yU7q40:ayvSdeTM5nPEGRnWmr1yU0
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
55c0b3104a74e05fc93490025a5623b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE