DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
Behavioral task
behavioral1
Sample
dfb104c2e72021d823daf828c360e2b3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dfb104c2e72021d823daf828c360e2b3_JaffaCakes118
Size
750KB
MD5
dfb104c2e72021d823daf828c360e2b3
SHA1
1461a28d8d175f17f61e96ee6187a61d4ae2e3b9
SHA256
4cf398b00b895977935ee7c110e88856f0b96129665bbf937406cd767fdbc747
SHA512
86a5cc87c777c02fff7dc58031557b2953fcaba3f71ad87dca41d375ba94e108eeb744d9fb7f5f83e7098644483f7ec82f7515db4819ae1a80eadb9e17ce59be
SSDEEP
12288:27LdIXJ58nruZGnzTqacxERbT9Ljkr3SgyXIKcOzN+IldpxvhvviFbJgdm8TIxAu:2vdgU6AyXuT9LjkZKcyrpxvh1UdOA7FP
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
dfb104c2e72021d823daf828c360e2b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE