DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0281d66756b7429e88bb242ad74d734c_JaffaCakes118.dll
Resource
win7-20240611-en
Target
0281d66756b7429e88bb242ad74d734c_JaffaCakes118
Size
26KB
MD5
0281d66756b7429e88bb242ad74d734c
SHA1
a6f52dd4cf37636b9a8e08de42e3938751ad6ace
SHA256
76ea75a6bc97be096b209f89013ab4665c9e57cbb1761bf4d5ef5eae2a4270c3
SHA512
4415cf4c0d1003a84ce26cb5618b4b34c7cc1502f6f8afd246c7bcd4c73126f284b871516163c57de302adeed61a28a0655ec78ce19c026d9cefa51d05d891b8
SSDEEP
384:c7KeseTF4ioVhgH9RzJUi77zb9sXKuhncqpXLMW5eAhvS1wqLx5/nkYcC2vHrkR4:cOB2oVS/Uw2XKuJXL4tLx5/kYcC2Hr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0281d66756b7429e88bb242ad74d734c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ