DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
Behavioral task
behavioral1
Sample
b0509c46de4a723aa3476a95867dd9f1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b0509c46de4a723aa3476a95867dd9f1_JaffaCakes118
Size
747KB
MD5
b0509c46de4a723aa3476a95867dd9f1
SHA1
915afcd2a31e34b9f5674a798948161006ddd27e
SHA256
9f1cc54f412fde587533b6b00f22ef2539eaba8cac25ccd2e35ec266b0a112e9
SHA512
1b7075275c4ea8884371b41e83225896a915c286b530b5a0fdab8bf0d21ec2cf07fa6fec6726599762cebba2508e0ea44e530d4d1906b8e607cf020e813d640d
SSDEEP
12288:K89MoQy1H1RtvRGgWxdysSTj1vAUcZ2ujzr3SgyXIKcOzN+IldpxvhvviFbJgdm7:KKMowgEg1vBcTfZKcyrpxvh1UdOAzR
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
b0509c46de4a723aa3476a95867dd9f1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE