DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TestFunc
Behavioral task
behavioral1
Sample
f34fd19d9297219d9af2d39be6349e83_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f34fd19d9297219d9af2d39be6349e83_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f34fd19d9297219d9af2d39be6349e83_JaffaCakes118
Size
17KB
MD5
f34fd19d9297219d9af2d39be6349e83
SHA1
572ab6f10e72b5fe6d09f08d94092c8a425d0f84
SHA256
a21d5754a54f6dfd8dc949bc76164fc18fea430c8e218526a50769afe44a7034
SHA512
01e8a53ba3eaa3dfc23f8d6bc2ccf9e2b782944e4905310a70d95113a61c65021ddd3a819bedb3ddbec7a6e5ccc83fde0dc677d23377fa0a88f3035de4fd658f
SSDEEP
192:g3mP/LItOtn7M/YjHEXqVOLuteH2hQz+uMmye4tzG/ExhPZ2WNPUiuFBb8jkfvN+:gQUItA/HXq4il91bXlU9djbQgr3udas
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f34fd19d9297219d9af2d39be6349e83_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TestFunc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ