DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
f23e90aa62f7caf9fb4eae221e9b43ce_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f23e90aa62f7caf9fb4eae221e9b43ce_JaffaCakes118
Size
9KB
MD5
f23e90aa62f7caf9fb4eae221e9b43ce
SHA1
c492a8c8e8b66f7a76e615d4ca54f905999051f7
SHA256
9f0f8a267da9205c81252ccb19dc7a4ffbb82708edc2a1bb40be78208f8c7786
SHA512
0e8088322f753c559b8e6139c4a2f5ddf47ab396cfa4f9649f0497d62bf39172388b1e2ff68318807381d6f8a9f356aa1a14b232e91fd53e0f631aebf1ef595e
SSDEEP
192:RFWjiTLfgBLdszybsRFaNJhLkwcud2DH9VwGfct70X:RF8CgvRsnaNJawcudoD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f23e90aa62f7caf9fb4eae221e9b43ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE