DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
Behavioral task
behavioral1
Sample
cf61720bbb2ae18e13f0eb37089bd095_JaffaCakes118.dll
Resource
win7-20240729-en
Target
cf61720bbb2ae18e13f0eb37089bd095_JaffaCakes118
Size
755KB
MD5
cf61720bbb2ae18e13f0eb37089bd095
SHA1
4b0c1c1a28ecbca4a8277143465094b6cd0f4ec5
SHA256
41eb14de1649602d74da0cb66429034737af7bde3040b081585c198dcdfcee06
SHA512
ff49f3bbb323e6c9ada9b3e12992cee703cede43883fa9d077d4de57170ad5416609ad67d07cbd926e1b0162825943cea87bb0f5a99c81cab7c7c94f12049257
SSDEEP
12288:/yYo0BUuMB/VmIpfWDMuvPw9BVbqr3SgyXIKcOzN+IldpxvhvviFbJgdm8TIxAqk:6Yo0QJDODvouZKcyrpxvh1UdOAug2
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
cf61720bbb2ae18e13f0eb37089bd095_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE