DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
0032d9fb35b8f604b6914c23aa4dbdf1_JaffaCakes118.dll
Resource
win7-20240611-en
Target
0032d9fb35b8f604b6914c23aa4dbdf1_JaffaCakes118
Size
8KB
MD5
0032d9fb35b8f604b6914c23aa4dbdf1
SHA1
3f77cc642d78c86cef2d2726c1e8a8d7b7303485
SHA256
88ebb21365003ebb3a9b6072d6fed60f9ed34a5fbf7444c88aa45dd2117380b2
SHA512
33844cda4eb9e14929df7abc18baaff38cfec8bc8716e9604a141048b280f55316a84aff0300ab1e8969a8b335fb984d78f9aefe66b09e52088794a08d089c55
SSDEEP
192:3VFAYPpvLgm+8WjHR6Ys7ryb0C7sXmqibRuVnDC:3VFN0m+8cx6pXK37s/mRI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0032d9fb35b8f604b6914c23aa4dbdf1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ