DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
Behavioral task
behavioral1
Sample
3bca89d67339d972bbd6906948d2738c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3bca89d67339d972bbd6906948d2738c_JaffaCakes118
Size
748KB
MD5
3bca89d67339d972bbd6906948d2738c
SHA1
dbdd7edef9c6cc09302b0952d1c2d48a9fa1bf6a
SHA256
1c4b221499bd58a2f1a7c8e07ddaaa8a053f4ccd23d78323e0dfa0f5b9221580
SHA512
6fe70dba9b0bf454ec3d7010cd21937dfbe34d869e967c2eb6b2dd2c5dc8f9eefd5c02164b342dfaaf015398cadc363a5d9b5c7db488fb3b94f2e81bf862f293
SSDEEP
12288:EBU8cxdgHWMkSMs0jgx8RX7r3SgyXIKcOzN+IldpxvhvviFbJgdm8TIxAqO7WHfn:I2MkSWW4X7ZKcyrpxvh1UdOAn
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3bca89d67339d972bbd6906948d2738c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE