DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
7Static
static
7ReYoDisk/@卸载.bat
windows7-x64
1ReYoDisk/@卸载.bat
windows10-2004-x64
1ReYoDisk/@绿化.bat
windows7-x64
1ReYoDisk/@绿化.bat
windows10-2004-x64
1ReYoDisk/ReYoDisk.dll
windows7-x64
1ReYoDisk/ReYoDisk.dll
windows10-2004-x64
1ReYoDisk/Test.exe
windows7-x64
1ReYoDisk/Test.exe
windows10-2004-x64
1飘荡精�...��.url
windows7-x64
1飘荡精�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ReYoDisk/@卸载.bat
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ReYoDisk/@卸载.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
ReYoDisk/@绿化.bat
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
ReYoDisk/@绿化.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
ReYoDisk/ReYoDisk.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
ReYoDisk/ReYoDisk.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
ReYoDisk/Test.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
ReYoDisk/Test.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
飘荡精品软件.url
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
飘荡精品软件.url
Resource
win10v2004-20240226-en
Target
31f2ce93404f179a92259972782d4ff5_JaffaCakes118
Size
50KB
MD5
31f2ce93404f179a92259972782d4ff5
SHA1
bb59c7cba9e376a61abe531114d335878de68933
SHA256
c4292f41bd1bab3c4eb160b5fef3876b393ab6128fed6de0b61d026dd01f1b39
SHA512
3307d6f4f956aa8191a77a361a85e9d9deff0f546392d40f59197fa451ffdca4fa814e4d1516b095d1fe098b9c91375f35109cfe4f8f10831cafb9a211068b10
SSDEEP
1536:+JHUV/7/6fdddFE5zOQgHv9EOYlw436DPrdJOtb9S:kM/7/Uk5yDvexlwe6DPYQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/ReYoDisk/ReYoDisk.dll | acprotect |
Checks for missing Authenticode signature.
resource |
---|
unpack001/ReYoDisk/ReYoDisk.dll |
unpack001/ReYoDisk/Test.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE