DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f272d47c8d452d1069f3b4f06d37f885_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f272d47c8d452d1069f3b4f06d37f885_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f272d47c8d452d1069f3b4f06d37f885_JaffaCakes118
Size
277KB
MD5
f272d47c8d452d1069f3b4f06d37f885
SHA1
32ae8e124d9917cc76eb4bec058feb7ec81bccb4
SHA256
fd4ce3e01487599a4d8d95d042a9962150fb685b0b4eb44cd0004c3512a8fa83
SHA512
11b3c80e63ecfa51f1afdc9d473f8f7fc67a6780af67ace6402d782628ace010a72a105fbd59a7601e4e4c52e17fff189e69634b34045a9ae308535bda915a90
SSDEEP
6144:XSb+tipv9/tpjzkWk6QQLfPwwGAEl3mNBUFA9RJEvNJWaVJE:Xy9BjzsmLffNGagJH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f272d47c8d452d1069f3b4f06d37f885_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE