DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0506cc983e9c97d7721aecf0f4bf0928_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0506cc983e9c97d7721aecf0f4bf0928_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0506cc983e9c97d7721aecf0f4bf0928_JaffaCakes118
Size
222KB
MD5
0506cc983e9c97d7721aecf0f4bf0928
SHA1
25cfc95c0a20484d6cf107f1336845e0771b2660
SHA256
bbd2ed4bedae30451d3da1501aba729da4199d1cb3b785a4d3aa768aab6b0ff4
SHA512
00b6846779dc9a100b6e680ac9bbc5913cb6a755b7d24dbec74520102bdbbf64b2e4ac0b67286206083fbe0e1e757b465e34bd5647d24d3e4c1a0b1b7bd12051
SSDEEP
6144:Hlh4aMzMmYrEyaV4d5eGxkl6GXCTiYDh13aAoS:HhMongJo5eWY6aCph13aAoS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0506cc983e9c97d7721aecf0f4bf0928_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE