DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
f75e4b0f2404fe9e49e94744366d29a6_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f75e4b0f2404fe9e49e94744366d29a6_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f75e4b0f2404fe9e49e94744366d29a6_JaffaCakes118
Size
75KB
MD5
f75e4b0f2404fe9e49e94744366d29a6
SHA1
690070c5f5ee4b87636bef18ac38f9bbbdff33d9
SHA256
bdd18ffcd9cde38f4777f411e4bffa0f6cb3242e0619096f83a6f9b4088a5094
SHA512
e224f272030cf424d33db8adb8e0d50d2aa72c1cb845f3f6be5f58a4e586d822528a64020e8308f762da2a42be2cb5920b5e519c2d743e69b4d81eb929359d43
SSDEEP
1536:lTYhJxDvLbYpcMqbFwKRnctxEVlLHcbhhRvRP/BzpcK:8bIIbSKRv5HaHfzpcK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f75e4b0f2404fe9e49e94744366d29a6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ